Skip to content

Latest commit

 

History

History
29 lines (18 loc) · 1.17 KB

README.md

File metadata and controls

29 lines (18 loc) · 1.17 KB

Linux kernel exploitation experiments

This is a playground for the Linux kernel exploitation experiments. Only basic methods. Just for fun.

Contents:

  • drill_mod.c - a small Linux kernel module with nice vulnerabilities. You can interact with it via a simple procfs interface.
  • drill.h - a header file describing the drill_mod.ko interface.
  • drill_test.c - a test for drill_mod.ko. It should also pass if the kernel is built with CONFIG_KASAN=y.
  • drill_exploit_uaf_callback.c - a basic use-after-free exploit invoking a callback in the freed drill_item_t struct.

N.B. Only basic exploit techniques here.

So compile your kernel with x86_64_defconfig and run it with pti=off nokaslr boot arguments.

Also don't forget to run qemu-system-x86_64 with -cpu qemu64,-smep,-smap.

License: GPL-3.0.

Have fun!

Repositories