CVE-2017-5123

CVE-2017-5123 针对内核漏洞 CVE-2017-5123 的利用程序 你可以使用以下命令编译它：gcc -static -Wall -Wextra -Werror -o cve20175123 CVE-2017-5123.c 如果你想要更详细的说明，我写了一篇文章解释其工作原理，你可以在此找到。 这个利用程序比之前 hexpresso 发布的更可靠，但仍然不完美，它无法在启用了 SMEP/SMAP 以及设置了 kptrrestrict 的系统上运行。...

Configure Kernel Parameter kptr_restrict Properly

kptrrestrict is used to protect kernel symbol addresses. When the protection level is low, common users can obtain kernel symbol addresses, which are easy to be exploited by attackers. This increases the attack surface and reduces system security. Currently, kptrrestrict can be set to any of the...

systemd security and bug fix update

219-78.0.1 - Backport upstream patches related to private-tmp Sushmita Bhattacharya Orabug: 31561883 - backport upstream pstore tmpfiles patch Eric DeVolder Orabug: 31414539 - udev rules: fix memory hot add and remove Orabug: 31309730 - enable and start the pstore service Orabug: 30950903 - fix t...

How to effectively bypass the Android kptr_restrict-vulnerability warning-the black bar safety net

In this article, I will introduce some of the you can bypass the Android kptrrestrict method, bypassing the Android kptrrestrict after that, we can more easily take advantage of Android's vulnerability. First, let's start with a quick look at how kptrrestrict of this stuff. kptrrestrict is what?...