
RowHammer Based-Exploit
استغلال قائم على RowHammer (باب خلفي لـ sys_suid باستخدام rowhammer) لا يزال يحتاج إلى عمل... لمعرفة سبب عدم عمل الأشياء بشكل صحيح...
Current stage... Denial fails with the following stack trace...
UG: unable to handle kernel paging request at 0000000100000000
PGD 8000000006de3067 P4D 8000000006de3067 PUD 0
Oops: 0010 [#1] PTI
CPU: 0 PID: 63 Comm: a.out Not tainted 4.17.0 #2
RIP: 0010:0x100000000
RSP: 0018:ffffc900000efdd0 EFLAGS: 00010206
RAX: ffff880007771600 RBX: ffff880006dd9000 RCX: ffffea00001a1af0
RDX: 0000000100000000 RSI: ffffea00001a20d8 RDI: ffff880007771600
RBP: 0000000000100011 R08: ffffffff81a47d80 R09: ffff880007771600
R10: ffff880007771630 R11: 0000000000000000 R12: ffff880007b79000
R13: ffffc900000f4000 R14: ffff880007771710 R15: ffff880006dd9000
FS: 0000000002158880(0000) GS:ffffffff81a35000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000100000000 CR3: 0000000006dda000 CR4: 00000000000006b0
Call Trace:
? kmem_cache_alloc+0x57/0x5e
? prepare_creds+0x1a/0x44
? copy_creds+0x3c/0x77
? copy_process.part.100+0x28d/0x1009
? alloc_set_pte+0x16d/0x181
? finish_fault+0x4a/0x53
? _do_fork+0xab/0x1d9
? __set_current_blocked+0x1d/0x1f
? sigprocmask+0x55/0x59
? do_syscall_64+0x7b/0x89
? entry_SYSCALL_64_after_hwframe+0x44/0xa9
Code: Bad RIP value.
RIP: 0x100000000 RSP: ffffc900000efdd0
CR2: 0000000100000000
---[ end trace 84b4943b0c9a767e ]---
Kernel panic - not syncing: Fatal exception
Kernel Offset: disabled
Rebooting in 1 seconds..