The flag that outlived the data.
Three lines from Dirty Pipe’s original exploit PoC drain a pipe. A live bit-level model shows why security-relevant state can survive—and how initialization breaks the chain.
public proof of concept · Original source
Attack code, under glass.
Original artifacts stay read-only. The browser runs bounded Kinwilder models, not fetched exploit code.
When test data became a build step.
An exact fragment of the compromised XZ release macro, an inspectable byte-level model, and the boundary where build data became instructions.
attack artifact · Original source