FS module now can overwrite the buffer of read syscalls, effectively modifying what is returned as a result. Small PoC included now which modifies any first char in a string to 'O'. Use under discretion, may crash some programs, not enough checks implemented yet.

Browse Source

...

This commit is contained in:

h3xduck

2022-01-15 16:16:30 -05:00

parent 945e2f2def

commit 99e9fd4277

6 changed files with 1538 additions and 16 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

src/.output/xdp_filter.bpf.o

Binary file not shown.

BIN

src/.output/xdp_filter.o Normal file

Binary file not shown.

1459

src/.output/xdp_filter.skel.h Normal file

File diff suppressed because it is too large Load Diff