Skip to main content

Chrome OS : Ways to Bypass Kernel protections

Chrome OS : Ways to Bypass Kernel protections

*First Protection to Bypass : NX (Never eXecute)*

Programs usually don't need to put their code on stack, so, it's logical to prevent them from doing it and executing content from there. NX is a protection option coming from processor used to control execution rights from some pages and used by Linux kernel. In this way, the operating system can use this facility to define what pages will have code and what others will have data.

So, with this protection, we still can store our shellcode in the stack, but, we can't execute it. How to check it ?

We need to ask for the CPU features of our current machine though 'flags' and founf that >NX< flag is active, it means NX protection is on.

We can bypass this protection using something called ret2libc only if another protection called ASLR (Address Space Layout Randomization) is not used (ASLR works as like sharm on 64bits processors and not so good on 32bits). A more extended and better way is to use ROP (Return Oriented Programming) because it can use any library you got as far as you know it very well and have the conditions required (actually, ret2libc is a basic form of ROP).

Also, just for the records, stack-smashing protection will help to prevent this kind of attacks too.

Labels:

Comments

Post a Comment

Popular posts from this blog

Physical Teleportation Theoretical method to do It!

Teleportation is the ability of moving matter from one point in time and space to another point in time and space instantaneously. There are different types of teleportation available at this time both visual and physical teleportation are possible and we use visual teleportation as our starting point. Types Visual body teleportation Astral body teleportation The different types of visual teleportation are. visual body or astral body teleportation , or visual object teleportation but before we can master teleportation we must first learn the art of Telekinesis/Psychokinesis and Clairsentience and the higher state of consciousness the seventh sense. Other abilities useful in teleportation are Tele-Visualization and ESP (Extrasensory Perception). The ability of teleportation is used in Time travel, Interstellar travel, and Dimensional travel. Teleportation is the near instantaneous transport of the Psychic from one location to another and there is no other fo...
5 comments
....

Guitar : Scale And Its Link To The Chords With A minor Pentatonic scale

Guitar : Scale And Its Link To The Chords With A minor Pentatonic scale we will learn the following things: 01. What is a scale?  Some basic theory on scales and the notes in them... You will have to wait for Part II (novice) for the whole story though! 02. How scales relate to chords:  why one scale can be used to solo over a certain chord progression, and another scale can't! 03. The A Minor Pentatonic scale:  an easy example of a scale that you are going to use for soloing! OK! Let's get going for your first lesson in improvisation and soloing!
1 comment
....

Convert ARF to MP4, WMV, MP3 with ARF Converter

Convert ARF to MP4, WMV, MP3 with ARF Converter Need to convert ARF to MP4, convert ARF to WMV, MP3? ARF Converter can help easily convert ARF files. Get your ARF File Converter to open and play ARF files now. ARF, standing for “advanced recording file”, is a file extension for a WebEx advanced recording file from a network-based recording. An ARF file contains the video data, a table of contents, an attendee list, and other information on separate panels. The ARF file extension is for recordings downloaded by the user. The ARF file extension is also used for automatic response files. The *.arf files are WebEx recordings directly downloaded by the user. However, we often meet problems when open or play ARF files. Why? Because the incompatibility of ARF file is not so good. To solve the compatibility and open or play ARF files with zone problems, it is nice to convert ARF to MP4, convert ARF to WMV, MP3 or other common video and audio formats. What Kind of ARF Converter or ARF Player Ca...
7 comments
....