9,379 questions
0
votes
0
answers
20
views
Find structure offsets from Android Linux Kernel
I’m not an expert in this area, I might be misunderstanding some fundamentals.
I’m using Genymotion to emulate Android , while researching some Android kernel CVEs, I need to analyze kernel ...
- 61
1
vote
0
answers
72
views
BIOS Bootloader: `int 10h` works once but not on the second call
I am writing my own i386 bootloader in Real Mode (org 0x7C00) that is supposed to switch to Protected Mode.
I am currently trying to output two characters with int 0x10 to debug, but only the first ...
- 43
Best practices
1
vote
0
replies
36
views
How do you fully automate a Kaggle notebook that requires a kernel restart mid-run after installing a library?
looking for advice on a workflow problem rather than a specific library issue.
The situation
I have a notebook that:
Installs packages via pip in Cell 1
# REVISED CELL 1
import subprocess, sys
# ...
3
votes
1
answer
58
views
Why I cannot reach wake_up_interruptible() function from netlink_setsockopt
I am trying to reach the wake_up_interruptible() call within netlink_setsockopt() in Linux kernel 3.16. However, I’ve noticed that the code path is only reached depending on the optlen I provide.
When ...
- 61
Advice
0
votes
2
replies
129
views
How to become a great (excellent) kernel engineer?
I am a beginner kernel engineer and I have tried creating an x86-64 Unix-like kernel from scratch using C and assembly for my real machine. I am also trying contributing to the Linux kernel. I am ...
- 65
1
vote
0
answers
68
views
Discrepancy in netlink_sock offsets between pahole and Kernel Module (offsetof)
While researching for different kernel exploits I need offset to particular value in struct, e.g:
portid offset to netlink_sock.
I found a tool called pahole to do exactly that job.
pahole -E ...
- 61
2
votes
1
answer
110
views
Alignment issue on context switch on a custom kernel
I'm writing a kernel in rust and assembly for embedded system in RISC-V 32 bits for several month now. I just notice today that when I run some task, after a certain amount of time, my kernel panic ...
Advice
1
vote
3
replies
131
views
Assembly x86 32-Bits Write Character
I'm currently working on a DOS Kernel 32 Bits on x86 Assembly
I'm looking for help, i want to print out the letter E on the screen to check if my far jump 16-Bits to 32-Bits is working correctly.
Also ...
0
votes
1
answer
53
views
Systemtap: How to probe functions invoked mq_notify()
I'm beginner and just want to learn exploit development for fun. So I've found a blogpost about step by step kernel exploitation.
https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part1....
- 61
Advice
0
votes
17
replies
360
views
How cheats are made in games with kernel level anti cheat?
I been learning C# for more than half a year, then I want to switch to C++ because it's closer to the processor. I'd like to make my own Fortnite cheat, because it could be a very fun and cool project ...
0
votes
0
answers
176
views
Mirror kernel virtual addresses in a user-space simulator
I am developing a user-space simulator that is intended to produce execution traces identical to those generated when the program runs inside the kernel.
The program operates within a small sandboxed ...
- 151
Advice
0
votes
1
replies
27
views
kmallloc() limitation for mmap and how big mem is allocated
I read in kernel doc that mmap needs physical memory that will be virtually mapped. The physical memory can be allocated by kmalloc(). However kmalloc() can allocate very limited amount of memory and ...
Advice
0
votes
4
replies
68
views
What is the best way to hack linux kernel source and learn by doing?
I am new to both Linux kernel engineering and mm. I am interested in mm subsystem.
One person on irc channel told me to read the page fault handler code (both x86 architecture specific and the generic ...
1
vote
4
answers
245
views
Is exit syscall invoked implicitly?
Is exit syscall actually invoked even if it is not called by a library function explicitly in the case a program terminates correctly by reaching the return statement in the main function?
- 39
2
votes
1
answer
149
views
Should I redefine GDT in the kernel if I already did in the bootloader
I have a simple bootloader where I have GDT and switch to protected mode Now I want just to play and experiment with interruptions my initial idea was to do everything in bootloader but at the end it ...
- 129