
Werkzeuge zur Automatisierung der Konfiguration einer Ubuntu 20.04-Umgebung zum Testen von CVE-2021-28476.
Paket zum Testen und zur Exploit-Entwicklung für POC CVE-2021-28476 vom bluefrostsecurity-Forscher
Installationsanleitung:
cd tools/
./add_to_path_tools.sh # addition tools for /usr/bin/
remove tools from /usr/bin:
cd tools/
./del_to_path_tools.sh
tools:
poc_init:
description:
preinit env guest host for compile POC (see poc_compile)
cmd args:
arg1 : path to cve root dir
exec options:
run as root
poc_compile:
description:
compile hv_netvsc src patched with poc code
cmd args:
no args
exec options:
run as root
poc_unload:
description:
unload hv_netvsc.ko from kernel
cmd args:
no args
exec options:
run as root
poc_load:
description:
load hv_netvsc.ko into kernel
cmd args:
no args
exec options:
run as root
poc_isload:
description:
check is hv_netvsc.ko in loaded kernel modules. If not displayed module is not loaded,else module is loaded
cmd args:
no args
exec options:
run as root
poc_run:
description:
execute poc code
cmd args:
number for func poc trigger
exec options:
run as root
poc_cfg_deps:
description:
download and install deps for poc_compile
cmd args:
no args
exec options:
run as root