Vulnerable Kernel Laboratory

a vulnerable kernel module to do kernel-exploit exercise

the following vulnerabilities included:

• shellcode execute
• kernel stack overflow
• set_fs/addr_limit overwrite
• mmap out of bounds
• ...

the following exploit technic included:

• ret2usr
• rop to bypass pxn
• kernel code patch
• dkom on cred
• ...

document

• env setup: https://github.com/Shark2016/vulklab/blob/main/doc/VULKLAB1.txt
• code execution and ret2user https://github.com/Shark2016/vulklab/blob/main/doc/VULKLAB2.txt
• buffer overflow and ret2user https://github.com/Shark2016/vulklab/blob/main/doc/VULKLAB3.txt
• rop and pxn bypass https://github.com/Shark2016/vulklab/blob/main/doc/VULKLAB4.txt
• mmap out of bounds https://github.com/Shark2016/vulklab/blob/main/doc/VULKLAB5.txt
• addr_limit overwrite/set_fs https://github.com/Shark2016/vulklab/blob/main/vulkexp/jni/vulkdev_addrlimit.c
• CVE-2014-3153 futex exploit https://github.com/Shark2016/vulklab/blob/main/doc/VULKLAB6.txt