out-of-tree kernel {module, exploit} development tool
Você não pode selecionar mais de 25 tópicos Os tópicos devem começar com uma letra ou um número, podem incluir traços ('-') e podem ter até 35 caracteres.
 
 
 
dump_stack() 8a53b6081c
Update changelog
2 anos atrás
.github/workflows GitHub Actions: Use latest stable nixpkgs channel 2 anos atrás
config Support custom docker commands 2 anos atrás
docs Move build from source to documentation 2 anos atrás
examples Fix spelling 2 anos atrás
qemu Update bootstrap scripts to Ubuntu 20.04 2 anos atrás
tools CentOS 8 image generator 2 anos atrás
.gitignore Remove snap support 3 anos atrás
CHANGELOG.md Update changelog 2 anos atrás
LICENSE Change license to GNU AGPLv3 3 anos atrás
README.md Add note about docker group 2 anos atrás
db.go Refactor [2] 2 anos atrás
debug.go Sync with the latest logrusorgru/aurora 2 anos atrás
gen.go Move upstream to code.dumpstack.io 3 anos atrás
go.mod Update go.mod 2 anos atrás
go.sum Sync with the latest logrusorgru/aurora 2 anos atrás
images.config.go Remove bootstrap, download images on-demand 2 anos atrás
images.go Remove bootstrap, download images on-demand 2 anos atrás
kernel.go Workaround for CentOS 8 Vault repos 2 anos atrás
kernel_linux.go Exclude host kernel generation for macOS 2 anos atrás
kernel_macos.go Exclude host kernel generation for macOS 2 anos atrás
log.go Sync with the latest logrusorgru/aurora 2 anos atrás
main.go Update changelog 2 anos atrás
pack.go Add flag for verbose output 2 anos atrás
pew.go Sync with the latest logrusorgru/aurora 2 anos atrás
pew_test.go Use go timers for kill docker by timeout, fixes #12 3 anos atrás

README.md

Codacy Badge Go Report Card Documentation Status Donate Donate

out-of-tree

out-of-tree kernel {module, exploit} development tool

out-of-tree is for automating some routine actions for creating development environments for debugging kernel modules and exploits, generating reliability statistics for exploits, and also provides the ability to easily integrate into CI (Continuous Integration).

Screenshot

Installation

GNU/Linux (with Nix)

$ curl -fsSL https://get.docker.com | sh
$ sudo usermod -aG docker user && newgrp docker
$ curl https://nixos.org/nix/install | sh
$ nix-env -iA nixpkgs.out-of-tree

Note that adding a user to group docker has serious security implications. Check Docker documentation for more information.

macOS

$ brew cask install docker
$ open --background -a Docker && sleep 1m
$ brew tap jollheef/repo
$ brew install out-of-tree

Read documentation for further info.

Examples

Run by absolute path

$ out-of-tree --path /path/to/exploit/directory pew

Test only with one kernel:

$ out-of-tree pew --kernel='Ubuntu:4.10.0-30-generic'

Run debug environment:

$ out-of-tree debug --kernel='Ubuntu:4.10.0-30-generic'

Test binary module/exploit with implicit defined test ($BINARY_test)

$ out-of-tree pew --binary /path/to/exploit

Test binary module/exploit with explicit defined test

$ out-of-tree pew --binary /path/to/exploit --test /path/to/exploit_test

Guess work kernels:

$ out-of-tree pew --guess

Use custom kernels config

$ out-of-tree --kernels /path/to/kernels.toml pew

Generate all kernels

$ out-of-tree kernel genall --distro Ubuntu --ver 16.04

Troubleshooting

If anything happens that you cannot solve -- just remove $HOME/.out-of-tree.

But it'll be better if you'll write the bug report.

Development

Read Qemu API.

Generate images

$ cd $GOPATH/src/code.dumpstack.io/tools/out-of-tree/tools/qemu-debian-img/
$ docker run --privileged -v $(pwd):/shared -e IMAGE=/shared/ubuntu1404.img -e RELEASE=trusty -t gen-ubuntu1804-image
$ docker run --privileged -v $(pwd):/shared -e IMAGE=/shared/ubuntu1604.img -e RELEASE=xenial -t gen-ubuntu1804-image