Lab 7 Tie-In and Final Words

• Lab 7 is the kernel use-after-free you saw diagrammed today: a "babydev"-style char driver, double-open, free-then-reuse, spray a victim object, escalate to root inside the QEMU VM.
• Everything transfers: heap grooming from Lab 6, leaks from Lab 5, the discipline of reading memory from Lab 1.
• Remember the ground rules: authorized, isolated lab only; these techniques are illegal against systems you do not own.
• Thank you for a great semester. You have walked three decades of the attack-defense arms race, end to end.