-
Notifications
You must be signed in to change notification settings - Fork 60
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add kernel-pwning initialization #293
Comments
I am interested in looking into that however I myself am just getting started with exploring kernel pwn and therefore don't exactly know how a common setup looks like. Your list of task is a good orientation but could you maybe point me to a e. g. challenge writeup that explains the steps you are looking to automate? If there is none, thats totally fine! |
Hello, I recently started exploring kernel pwn as well, and I recommend this article here. It explains some basic environments setup and explanation about some popular Linux kernel mitigation and their corresponding exploit techniques. https://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/ |
@ReeyaDono nice link. Also we can add the auto-generation(or just template?) of |
@k4mp3t noted that all this turned out to be not a useful feature. Closing. |
Currently it only supports userland-pwning chals. Kernel-pwning also need such a bootstrap.
bzImage
filevmlinux
frombzImage
, +testsvmlinux
like vmlinux-to-elf did, +testscompress.sh
/decompress.sh
to work withcpio
-compressed initramfs. Example [here](https://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/)
Probably can add dependency on vmlinux-to-elf repo?
The text was updated successfully, but these errors were encountered: