CVE-2014-3153

Vulnerable Kernel Laboratory a vulnerable kernel module to do kernel-exploit exercise the following vulnerabilities included: shellcode execute kernel stack overflow set_fs/addr_limit overwrite mmap out of bounds the following exploit technic included: ret2usr rop to bypass pxn kernel code patch dkom on cred document env setup: githubcom/Shark2016/vulklab/

Some of the real world kernel exploits I wrote I guess it is safe to release these exploits now :) CVE-2014-3153

Research of CVE-2014-3153 and its famous exploit towelroot on x86

towelroot Research of CVE-2014-3153 and its famous exploit towelroot on IA (x86) This job has DONE, but I can't leak the code, someone in my company has challenged me :( ##Compile gcc -fno-stack-protector -m32 -O0 -pthread towelrootc -o towelroot

Training scenarios for cyber ranges

Cyber Range Scenarios Training scenarios for cloud-based cyber ranges, initially focused on utilizing Google Cloud Platform Available scenarios Scenario name Primary OS Type OS Versions Vulns CVEs Shell Shock example Linux RHEL 7 Shell Shock, libfutex CVE-2014-6271, CVE-2014-3153 overlayfs example Linux Ubuntu 1404 'overlayfs' Local Privilege Escalation CVE-

Google Cloud Cyber Range

Shell Shock / libfutex Privilege Escalation Example This scenario can be used to train operators to leverage a Shell Shock vulnerability in a PHP web page, along with the 'libfutex' Local Privilege Escalation Shell Shock libfutex Scenario features Feature Availability Implemented With Targets Yes GCE Attackers Yes GCE VPC Yes VPC Network logs Yes VPC F

My exploit for kernel exploitation

CVE-2014-3153-exploit My exploit for kernel exploitation

JNI reque/relock futex bug example

JNI reque/relock futex bug See: CVE-2014-3153

Some of the real world kernel exploits I wrote I guess it is safe to release these exploits now :) CVE-2014-3153

Cyber Range Scenarios Training scenarios for cloud-based cyber ranges, initially focused on utilizing Google Cloud Platform Available scenarios Scenario name Primary OS Type OS Versions Vulns CVEs Shell Shock example Linux RHEL 7 Shell Shock, libfutex CVE-2014-6271, CVE-2014-3153 overlayfs example Linux Ubuntu 1404 'overlayfs' Local Privilege Escalation CVE-

cve2014-3153 exploit for ubuntu x86

##Towelroot for Ubuntu x86 This exp has been tested on ubuntu 1404 x86 and ubuntu 12042 x86 successfully Learning CVE2014-3153 and towelroot Kernel through version 314, use rbtree to store rt_waiter(not plist_node), more complex! IA have diffrent thread_info with ARM!! Source from geekben/towelroot and timwr/CVE-2014-3153 ###Compile and run $ gcc -fno-stack-protector -m3

Project: TowelRoot and Injection code into linux kernel This README gives some explications about the exploit 'src/towelroot_inject_codec', more details about the project please read file 'repportpdf' Exploit The goal of the exploit which leverages the futex vulnerability is to inject code into kernel where 'loadable kernel modules(or LKM)' is n

Gain root privilege by exploiting CVE-2014-3153 vulnerability

What is TowelRoot? Towelroot gains root access by exploiting a vulnerability in the kernel of Android, which is based on Linux and is a very basic component of the device that basically acts as a middle-man to make the operating system and the physical hardware talk to one another (threatpostcom/android-ransomware-attacks-using-towelroot-hacking-team-exploits/117655/)

towelroot

CVE-2014-3153 ubuntu 1404 64-bit 3130-24-generic