9,382 questions
-4
votes
0
answers
27
views
How to use `sysret` to switch to ring 3 in NASM with full example [closed]
The one on OSDev wiki is not complete/working and I do not know much asm so if you could help me out that would be perfect :)
-4
votes
0
answers
53
views
Why Do My Bootloader Jump to Second Bootloader Don't Work? [closed]
For context, i am created a 32-Bits DOS
I have currently two bootloader in ASM x86
The first is in 16-Bits it print string, load a gdt then jump to the second bootloader
The second enable Protected ...
0
votes
0
answers
26
views
Systemtap: How to probe functions invoked mq_notify()
I'm beginner and just want to learn exploit development for fun. So I've found a blogpost about step by step kernel exploitation.
https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part1....
0
votes
0
answers
14
views
Building a Custom Read-Only iSCSI Target on Windows (Physical Disk Export) [closed]
I want to implement a custom iSCSI target on Windows Server 2019 that exports a physical disk (\.\PhysicalDriveX) in strict read-only mode to a Windows client.
Requirements:
Disk should appear as a ...
- 1
Advice
0
votes
16
replies
269
views
How cheats are made in games with kernel level anti cheat?
I been learning C# for more than half a year, then I want to switch to C++ because it's closer to the processor. I'd like to make my own Fortnite cheat, because it could be a very fun and cool project ...
0
votes
0
answers
33
views
Mirror kernel virtual addresses in a user-space simulator
I am developing a user-space simulator that is intended to produce execution traces identical to those generated when the program runs inside the kernel.
The program operates within a small sandboxed ...
Advice
0
votes
1
replies
25
views
kmallloc() limitation for mmap and how big mem is allocated
I read in kernel doc that mmap needs physical memory that will be virtually mapped. The physical memory can be allocated by kmalloc(). However kmalloc() can allocate very limited amount of memory and ...
Advice
0
votes
4
replies
57
views
What is the best way to hack linux kernel source and learn by doing?
I am new to both Linux kernel engineering and mm. I am interested in mm subsystem.
One person on irc channel told me to read the page fault handler code (both x86 architecture specific and the generic ...
1
vote
4
answers
234
views
Is exit syscall invoked implicitly?
Is exit syscall actually invoked even if it is not called by a library function explicitly in the case a program terminates correctly by reaching the return statement in the main function?
- 39
2
votes
1
answer
141
views
Should I redefine GDT in the kernel if I already did in the bootloader
I have a simple bootloader where I have GDT and switch to protected mode Now I want just to play and experiment with interruptions my initial idea was to do everything in bootloader but at the end it ...
- 129
Best practices
1
vote
1
replies
59
views
Test a kernel driver in QEMU
How should I test a Linux kernel driver, without a real device. It is not a device that QEMU supports(in my case, it's drivers/tty/serial/digicolor-usart.c).
Gemini told me I can modify the source ...
- 1
2
votes
0
answers
67
views
Reading CLOCK_BOOTTIME clock from BPF probe
I am using a BPF probe on sys_execve() to log current->start_boottime along with UID, GID, nspid etc. The probe also logs the current time using bpf_ktime_get_ns().
I am logging start_boottime a.k....
- 1,014
3
votes
2
answers
148
views
/kernel mode in MSVC cl.exe allows new despite specifying user must explicitly define the operator
According to documentation, under /kernel mode:
You must explicitly define the new() or delete() operator. The
compiler and runtime don't supply a default definition.
Yet, the following code ...
- 199
Tooling
0
votes
0
replies
33
views
How to tell gdb the default opsize, so it can debug multi cpu mode code (without a weird disassembly output)
Note: This is a repost of a question I asked on RetroComputing, where I was told to move it here.
I've made my own kernel. It has 32-bit pm, 16-bit pm, and 16-bit real mode code. I use Qemu to ...
0
votes
1
answer
58
views
Where Can I See the Mapping Flow Between .dynsym and Kernel System Calls?
I'm struggling to reconcile the difference between the symbols listed in my ELF file's dynamic symbol table (.dynsym) and the system calls observed via strace.
When I perform static analysis using ...
- 1