kernel-hack-drill
kernel-hack-drill copied to clipboard
feature: out-of-bound write primitive and an exploit
hello, @a13xp0p0v !
please have a look at these changes:
-
module has been patched to make OOBW happen,
drill_testupdated as well to prevent heap corruption - built a basic exploit
- and carefully repaired modprobe_path
- readme updated as well
also POC can bypass this mitigations:
-
CONFIG_SLAB_MERGE_DEFAULT=n -
CONFIG_SLAB_FREELIST_RANDOM=y -
CONFIG_SLAB_FREELIST_HARDENED=y -
CONFIG_SLAB_BUCKETS=y