1
0
Fork 0
out-of-tree kernel {module, exploit} development tool
 
 
 
 
Go to file
dump_stack() 72aef7545a Now use two separate config for autogenerated and user-defined kernels 2018-12-01 16:57:15 +00:00
config Implements kernels config autogeneration 2018-12-01 14:23:01 +00:00
examples Print kernel config skeleton to stdout 2018-11-28 23:53:47 +00:00
qemu Add ssh command generator 2018-11-25 14:44:14 +00:00
tools Remove CentOS and Debian from kernel factory 2018-11-17 13:09:42 +00:00
.gitignore Initial commit 2018-09-17 20:15:16 +04:00
LICENSE Change license to GNU AGPLv3 2018-10-08 20:54:18 +00:00
README.md Implements kernel debug environment 2018-11-25 14:46:29 +00:00
debug.go Move gdb listen address to params 2018-11-25 14:53:56 +00:00
gen.go Implements skeleton module/exploit config generator 2018-11-23 09:11:18 +00:00
kernel.go Allow to force bump docker container 2018-12-01 15:11:43 +00:00
main.go Now use two separate config for autogenerated and user-defined kernels 2018-12-01 16:57:15 +00:00
pew.go Improve error logging 2018-12-01 14:30:28 +00:00

README.md

out-of-tree

out-of-tree kernel {module, exploit} development tool

Screenshot

Installation

Read Qemu API.

Generate images

$ cd $GOPATH/src/github.com/jollheef/out-of-tree/tools/qemu-debian-img/
$ docker run --privileged -v $(pwd):/shared -e IMAGE=/shared/ubuntu1404.img -e RELEASE=trusty -t gen-ubuntu1804-image
$ docker run --privileged -v $(pwd):/shared -e IMAGE=/shared/ubuntu1604.img -e RELEASE=xenial -t gen-ubuntu1804-image

Generate kernels

cd $GOPATH/src/github.com/jollheef/out-of-tree/tools/kernel-factory
./bootstrap.sh # more than 6-8 hours for all kernels

"I just want to see how it works"

If you already have Go, Qemu and Docker installed, there's cross-platform installation checklist:

$ go get github.com/jollheef/out-of-tree
$ cd $GOPATH/src/github.com/jollheef/out-of-tree/tools/qemu-debian-img/
$ ./bootstrap.sh
$ docker run --privileged -v $(pwd):/shared -e IMAGE=/shared/ubuntu1604.img -e RELEASE=xenial -t gen-ubuntu1804-image
$ cd ../kernel-factory
$ rm -rf {Debian,CentOS,Ubuntu/{14.04,18.04}} # speed up :)
$ ./bootstrap.sh
$ # wait several hours...
$ export OUT_OF_TREE_KCFG=$GOPATH/src/github.com/jollheef/out-of-tree/tools/kernel-factory/output/kernels.toml
$ cd ../../examples/kernel-exploit
$ # test kernel exploit
$ out-of-tree pew
$ cd ../kernel-module
$ # test kernel module
$ out-of-tree pew

Examples

Run by absolute path

$ out-of-tree --path /path/to/exploit/directory pew

Test only with one kernel:

$ out-of-tree pew --kernel='Ubuntu:4.10.0-30-generic'

Run debug environment:

$ out-of-tree debug --kernel='Ubuntu:4.10.0-30-generic'

Test binary module/exploit with implicit defined test ($BINARY_test)

$ out-of-tree pew --binary /path/to/exploit

Test binary module/exploit with explicit defined test

$ out-of-tree pew --binary /path/to/exploit --test /path/to/exploit_test

Guess work kernels:

$ out-of-tree pew --guess

Use custom kernels config

$ out-of-tree --kernels /path/to/kernels.toml pew