0xor0ne Awesome List

What it is

0xor0ne's Awesome List is a flat list of roughly 250 titled links to blog posts, write-ups and papers. The page gives titles only, with no descriptions, dates, ratings or per-entry notes. The five domain headings (Exploitation, Linux Kernel, Wireless, OT/IoT Security, Red Teaming and Offensive Security) appear only at the end as links to sub-lists. The main list is not grouped by them.

Entries a reader may want to search for

The list names specific bugs and incidents that the catalog summary does not.

• Linux kernel CVEs: CVE-2022-0435 (remote stack overflow), CVE-2022-0847 (Dirty Pipe, two entries), CVE-2022-2602 (DirtyCred on an io_uring UAF), CVE-2022-27666 (esp6), CVE-2022-29582 and CVE-2021-20226 (io_uring), CVE-2022-32250 (nf_tables and mqueue, two entries), CVE-2022-42703, CVE-2021-22555, CVE-2019-2215, CVE-2017-11176 and EntryBleed (CVE-2022-4543, a KASLR break under KPTI).
• Network devices: Fortigate authentication bypass, Zyxel authentication bypass (CVE-2022-0342), Cisco RV340 SSL VPN RCE, Cisco RV110W patch diffing, Watchguard blind exploits, MikroTik, Netgear Orbi and RAX30, TP-Link Archer C7 and AC1750, Tenda W15Ev2, and the Western Digital PR4100 NAS RCE.
• Cameras and DVRs: TP-Link Tapo C200 unauthenticated RCE (CVE-2021-4045) and Xiongmai DVR overflows.
• Hypervisors and system software: VMware ESXi OpenSLP (CVE-2020-3992 and CVE-2021-21974, two entries), runC container escape (CVE-2019-5736), polkit privilege escalation, and an SQLite flaw ("Stranger Strings").
• Secure boot and hardware: four ESP32 entries (CVE-2020-13629, CVE-2020-15048, EMFI, and PC control during secure boot), the STM32F1 read-out protection break, the MediaTek BootROM glitch, Titan M, Samsung RKP and TrustZone, Huawei's hypervisor, a PCIe DMA attack on a Jetson Nano (CVE-2022-21819), and BitLocker key extraction from a TPM.
• Malware and defence: analyses of BPFDoor, Symbiote, Shikitega, RedXOR and Pegasus for Android, plus entries on spoofing call stacks against EDRs, Linux persistence, and fileless memfd_create() malware detection.
• Learning series: Linux kernel exploitation, SLUB and slab allocator internals, GLIBC heap techniques (House of Rust, House of Muney, safe-linking), ARM64 assembly, Ghidra, Fuzzing101 with LibAFL, and CodeQL.

Caveats

The page does not say which entries have a working exploit, which target versions are affected, or which have patches. The reader has to open each link to find out. Most CVE entries are from 2019 to 2022, and the newest item named is a December 2022 mitigations survey. For current exposure, use the list to find write-ups and check vendor advisories separately.