Privilege-Escalation on +5 Security Research

Privilege-Escalation on +5 Security Researchhttps://overkazaf.github.io/blogs/tags/privilege-escalation/Recent content in Privilege-Escalation on +5 Security ResearchHugozh-cnSat, 09 May 2026 00:00:00 +0000四层特权，四条链，一个目标 - ARM TrustZone EL0→EL3 攻击实录https://overkazaf.github.io/blogs/posts/arm-trustzone-el0-to-el3-attack-chain-anatomy/Sat, 09 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/arm-trustzone-el0-to-el3-attack-chain-anatomy/以 Quarkslab/Project Zero/360 Alpha Lab 的四条真实攻击链为案例，从 ARM 异常等级架构出发，逐层解剖 EL0→S-EL0→S-EL1→EL3 的提权技术：共享内存机制、SMC 调用约定、Trustlet 漏洞模式、TEE 内核提权、Secure Monitor 劫持，以及 Boot Chain 替代路径