tawm-ntawm-ntoo v1.0.0 - cov cuab yeej rau kev tsim thiab kev sim exploits thiab Linux kernel modules


tawm-ntawm-ntoo v1.0.0 - cov cuab yeej rau kev tsim thiab kev sim exploits thiab Linux kernel modules

Thawj (v1.0.0) version ntawm tawm-ntawm-ntoo, cov khoom siv rau kev tsim thiab sim kev siv thiab Linux kernel modules, raug tso tawm.

tawm-ntawm-ntoo tso cai rau koj los ua kom muaj qee qhov kev ua haujlwm niaj hnub los tsim ib puag ncig rau kev debugging kernel modules thiab exploits, generating exploit reliability statistics, thiab kuj muab lub peev xwm los yooj yim integrate rau hauv CI (Nruam Integration).

Txhua kernel module lossis exploit tau piav qhia los ntawm cov ntaub ntawv .out-of-tree.toml, uas qhia txog cov ntaub ntawv hais txog qhov xav tau ib puag ncig thiab (yog tias nws yog ib qho kev siv) kev txwv ntawm kev ua haujlwm nyob rau hauv muaj qee yam kev ruaj ntseg mitigations.

Cov cuab yeej tseem tso cai rau koj los txheeb xyuas cov ntsiab lus tshwj xeeb uas cuam tshuam los ntawm qhov tsis zoo (siv cov lus txib --guess), thiab tseem tuaj yeem siv los ua kom yooj yim rau kev tshawb nrhiav binary rau ib qho kev cog lus tshwj xeeb.

Hauv qab no yog cov npe hloov pauv txij li version v0.2.

Ntxiv

  • Siv lub peev xwm los txwv tus naj npawb ntawm generated (tawm-ntawm-ntoo kernel autogen) kernels (raws li cov lus piav qhia nyob rau hauv .out-of-tree.toml) thiab xyuas khiav (tawm-ntawm-ntoo pew) siv lub β€”max= X parameter.

  • Tshiab genall hais kom ua, uas tso cai rau koj los tsim tag nrho cov kernels rau ib qho kev faib thiab version.

  • Tag nrho cov cav tau tam sim no khaws cia hauv sqlite3 database. Siv cov lus txib rau cov lus nug uas xav tau yooj yim, nrog rau kev xa tawm cov ntaub ntawv mus rau json thiab markdown.

  • Ua raws li kev suav ntawm qhov tshwm sim ntawm kev ua haujlwm tiav (raws li kev tshaj tawm yav dhau los).

  • Muaj peev xwm txuag tau qhov tsim tau (tshiab --dist parameter rau tawm-ntawm-ntoo pew hais kom ua)

  • Kev them nyiaj yug rau tsim cov metadata rau kernels ntsia rau ntawm tus tswv system, nrog rau lub tsev ncaj qha ntawm tus tswv tsev.

  • Kev them nyiaj yug rau lwm tus neeg kernels.

  • Qhov tawm-ntawm-ntoo debug ib puag ncig tam sim no cia li tshawb nrhiav cov cim debugging ntawm tus tswv system.

  • Ntxiv lub peev xwm los tswj kev ruaj ntseg mitigations nrog pab / lov tes taw chij KASLR, SMEP, SMAP thiab KPTI thaum lub sij hawm debugging.

  • Ntxiv cov --threads = N parameter rau qhov tawm-ntawm-ntoo pew kuaj cov lus txib, uas tuaj yeem siv los txheeb xyuas cov xov tooj uas tsim / khiav thiab ntsuas kev siv thiab cov kernel modules.

  • Lub peev xwm los teeb tsa ib lub cim uas yuav raug kaw hauv lub cav thiab tuaj yeem siv los suav cov txheeb cais.

  • Ntxiv lub peev xwm los qhia cov ntsiav version yam tsis tau siv cov lus qhia tsis tu ncua.

  • Cov lus txib tshiab pob, siv rau kev sim loj ntawm kev siv thiab cov ntsiav modules hauv subdirectories.

  • Hauv kev teeb tsa (.out-of-tree.toml) rau kev siv thiab cov ntsiav module, lub peev xwm los lov tes taw KASLR, SMEP, SMAP thiab KPTI tau ntxiv, nrog rau qhia cov naj npawb ntawm cov cores thiab nco.

  • Tam sim no cov duab (rootfs) tau thauj khoom cia li thaum kernel autogen tab tom khiav. bootstrap tsis xav tau lawm.

  • Txhawb rau CentOS kernels.

Hloov

  • Tam sim no, yog tias tsis muaj cov duab (rootfs) rau qhov yuav tsum tau ua ntawm kev faib tawm, tawm-ntawm-ntoo yuav sim siv cov duab ntawm qhov ze tshaj plaws version. Piv txwv li, Ubuntu 18.04 duab rau Ubuntu 18.10.

  • Tam sim no kev ntsuam xyuas rau cov ntsiav modules yuav tsis raug suav hais tias ua tsis tiav yog tias lawv ploj lawm (tsis muaj kev sim - tsis muaj qhov yuam kev!).

  • Tam sim no tawm-ntawm-ntoo yuav rov qab qhov yuam kev tsis zoo yog tias tsawg kawg ib theem (tsim, tso lossis sim) ntawm ib qho ntawm cov cores ua tsis tiav.

  • Qhov project tau hloov mus rau kev siv Go modules, lub tsev nrog GO111MODULE=on yog tam sim no nyiam.

  • Ntxiv cov kev xeem ua ntej.

  • Test.sh tam sim no yuav raug siv los ntawm lub neej ntawd yog tias lub rooj sib txoos hauv ${TARGET}_test tsis raug siv hauv Makefile.

  • Lub kernel cav tsis raug tshem tawm lawm ua ntej khiav lub kernel module lossis exploit. Qee qhov kev siv dag zog siv lub hauv paus hauv paus xau hauv dmesg los hla KASLR, yog li kev ntxuav tuaj yeem ua txhaum qhov kev siv dag zog ua haujlwm.

  • qemu/kvm tam sim no siv tag nrho cov peev txheej ntawm tus tswv tsev processor.

Tshem tawm

  • Kernel Factory tshem tawm tag nrho vim yog kev siv cov ntsiav tiam raws li kev hloov kho tshiab Dockerfiles.

  • bootstrap tsis ua lwm yam. Cov lus txib yuav raug muab tshem tawm hauv kev tso tawm tom ntej.

Kho

  • Ntawm macOS, GNU coreutils tsis tas yuav tsum khiav.

  • Cov ntaub ntawv ib ntus tau raug tsiv mus rau ~/.out-of-tree/tmp/ vim yog qhov yuam kev hauv docker ntawm qee lub tshuab.

Tau qhov twg los: linux.org.ru ua

Ntxiv ib saib