About:

Andrey Konovalov is a security researcher and founder of Xairy Labs, focusing on Linux and Android kernel security.

Website:

Specializations:

Interests:

Linux kernel security Android kernel security Fuzzers Exploits Mitigations

Incoming Links:

Subscribe to RSS:
This article provides a comprehensive guide on using GDB over a serial connection to debug the kernel on a Pixel 8 device. It covers the process of building and flashing a custom kernel to enable KGDB, breaking into KGDB via ADB o...
The text is about how the author turned his ThinkPad X1 Carbon 6th Gen laptop into a programmable USB device by enabling the xDCI controller. The journey included fiddling with Linux kernel drivers, xHCI, DWC3, ACPI, BIOS/UEFI, Bo...
The article covers the experience of fuzzing the Linux kernel externally over the network, including the process of extending a kernel fuzzer called syzkaller and finding bugs. It also includes an introduction to syzkaller and its...
The post provides instructions on creating an offline Cardano wallet and signing Cardano transactions offline with the help of command-line tools. It discusses the issues with hardware wallets and the benefits of using an offline ...
The text discusses the implementation of fancy syntax highlighting for syzkaller snippets using Rouge, the default syntax highlighter on GitHub Pages. The author explains the process, the reason for implementing it, and the future...
The text discusses CVE-2017-18344, an arbitrary-read vulnerability in the Linux kernel timer subsystem, and the exploit that was written for it. It provides an overview of the bug, its impact, and the fix. The author also shares d...
The text is a mini-article about CVE-2017-1000112, a memory corruption vulnerability found in the UDP Fragmentation Offload feature of the Linux kernel IP sockets. It contains a brief description of the Local Privilege Escalation ...
The text provides tips on improving the security of an Ubuntu Desktop or Linux Mint installation, including setting BIOS/UEFI password, enabling full disk encryption, updating packages, disabling unneeded services, restricting inf...