new module

pwncollege · Apr 2, 2024 · 07ff10d · 07ff10d
1 parent 3e8f2d1
commit 07ff10d
Show file tree

Hide file tree

Showing 41 changed files with 58 additions and 0 deletions.
diff --git a/dojo.yml b/dojo.yml
@@ -800,3 +800,11 @@ modules:
       slides: 1PQyr2D6IsFOUs0sXYbYtcRQGGTMMJNb42uKDOlLT6vQ
       playlist: PL-ymxv0nOtqoU92gd9MEX4ABDGW6nvVma
       video: P0OGmS5vKjk
+
+- id: kernel-exploitation
+  resources:
+    - name: "Slab Allocators"
+      type: lecture
+      slides: 1dR46TFFhBzxXgOH7zFscEyC6oiAbawUMP2Wzff8eQNA
+
+
diff --git a/kernel-exploitation/DESCRIPTION.md b/kernel-exploitation/DESCRIPTION.md
@@ -0,0 +1,7 @@
+You've taken your first steps into kernel exploitation with [Kernel Security](https://pwn.college/system-security/kernel-security).
+
+Are you ready to kick your knowledge up a notch to understand how real-world Linux kernel exploitation is done?
+
+This module will provide you with the guide that you need to become an expert in Linux kernel exploitation.
+
+**Note** this module does not currently have recordings. Proceed at your own risk.
diff --git a/kernel-exploitation/files/0/bzImage b/kernel-exploitation/files/0/bzImage
diff --git a/kernel-exploitation/files/1/bzImage b/kernel-exploitation/files/1/bzImage
diff --git a/kernel-exploitation/files/2/bzImage b/kernel-exploitation/files/2/bzImage
diff --git a/kernel-exploitation/files/3/bzImage b/kernel-exploitation/files/3/bzImage
diff --git a/kernel-exploitation/level1/bzImage b/kernel-exploitation/level1/bzImage
@@ -0,0 +1 @@
+../files/0/bzImage
diff --git a/kernel-exploitation/level1/challenge1.ko b/kernel-exploitation/level1/challenge1.ko
diff --git a/kernel-exploitation/level1/vmlinux b/kernel-exploitation/level1/vmlinux
@@ -0,0 +1 @@
+../files/0/vmlinux
diff --git a/kernel-exploitation/level2/bzImage b/kernel-exploitation/level2/bzImage
@@ -0,0 +1 @@
+../files/1/bzImage
diff --git a/kernel-exploitation/level2/challenge2.ko b/kernel-exploitation/level2/challenge2.ko
diff --git a/kernel-exploitation/level2/vmlinux b/kernel-exploitation/level2/vmlinux
@@ -0,0 +1 @@
+../files/1/vmlinux
diff --git a/kernel-exploitation/level3/.kaslr b/kernel-exploitation/level3/.kaslr
diff --git a/kernel-exploitation/level3/bzImage b/kernel-exploitation/level3/bzImage
@@ -0,0 +1 @@
+../files/1/bzImage
diff --git a/kernel-exploitation/level3/challenge3.ko b/kernel-exploitation/level3/challenge3.ko
diff --git a/kernel-exploitation/level3/vmlinux b/kernel-exploitation/level3/vmlinux
@@ -0,0 +1 @@
+../files/1/vmlinux
diff --git a/kernel-exploitation/level4/.kaslr b/kernel-exploitation/level4/.kaslr
diff --git a/kernel-exploitation/level4/bzImage b/kernel-exploitation/level4/bzImage
@@ -0,0 +1 @@
+../files/1/bzImage
diff --git a/kernel-exploitation/level4/challenge4.ko b/kernel-exploitation/level4/challenge4.ko
diff --git a/kernel-exploitation/level4/vmlinux b/kernel-exploitation/level4/vmlinux
@@ -0,0 +1 @@
+../files/1/vmlinux
diff --git a/kernel-exploitation/level5/.kaslr b/kernel-exploitation/level5/.kaslr
diff --git a/kernel-exploitation/level5/bzImage b/kernel-exploitation/level5/bzImage
@@ -0,0 +1 @@
+../files/2/bzImage
diff --git a/kernel-exploitation/level5/challenge5.ko b/kernel-exploitation/level5/challenge5.ko
diff --git a/kernel-exploitation/level5/vmlinux b/kernel-exploitation/level5/vmlinux
@@ -0,0 +1 @@
+../files/2/vmlinux
diff --git a/kernel-exploitation/level6/.kaslr b/kernel-exploitation/level6/.kaslr
diff --git a/kernel-exploitation/level6/.panic_on_oops b/kernel-exploitation/level6/.panic_on_oops
diff --git a/kernel-exploitation/level6/bzImage b/kernel-exploitation/level6/bzImage
@@ -0,0 +1 @@
+../files/2/bzImage
diff --git a/kernel-exploitation/level6/challenge6.ko b/kernel-exploitation/level6/challenge6.ko
diff --git a/kernel-exploitation/level6/vmlinux b/kernel-exploitation/level6/vmlinux
@@ -0,0 +1 @@
+../files/2/vmlinux
diff --git a/kernel-exploitation/level7/.kaslr b/kernel-exploitation/level7/.kaslr
diff --git a/kernel-exploitation/level7/.panic_on_oops b/kernel-exploitation/level7/.panic_on_oops
diff --git a/kernel-exploitation/level7/bzImage b/kernel-exploitation/level7/bzImage
@@ -0,0 +1 @@
+../files/2/bzImage
diff --git a/kernel-exploitation/level7/challenge7.ko b/kernel-exploitation/level7/challenge7.ko
diff --git a/kernel-exploitation/level7/vmlinux b/kernel-exploitation/level7/vmlinux
@@ -0,0 +1 @@
+../files/2/vmlinux
diff --git a/kernel-exploitation/level8/.kaslr b/kernel-exploitation/level8/.kaslr
diff --git a/kernel-exploitation/level8/.panic_on_oops b/kernel-exploitation/level8/.panic_on_oops
diff --git a/kernel-exploitation/level8/bzImage b/kernel-exploitation/level8/bzImage
@@ -0,0 +1 @@
+../files/3/bzImage
diff --git a/kernel-exploitation/level8/challenge8.ko b/kernel-exploitation/level8/challenge8.ko
diff --git a/kernel-exploitation/level8/vmlinux b/kernel-exploitation/level8/vmlinux
@@ -0,0 +1 @@
+../files/3/vmlinux
diff --git a/kernel-exploitation/module.yml b/kernel-exploitation/module.yml
@@ -0,0 +1,26 @@
+name: Kernel Exploitation
+challenges:
+  - id: level1
+    name: Level-1
+    description: get a hang of how Linux kernel heap works with no protection-ish, have fun!
+  - id: level2
+    name: Level-2
+    description: time to try some "real-tm" kernel exploitation (randomized freelist) with no "win" functions!
+  - id: level3
+    name: Level-3
+    description: well, real-world kernels have this weird KASLR thingy
+  - id: level4
+    name: Level-4
+    description: how do you exploit the kernel with no function pointers?
+  - id: level5
+    name: Level-5
+    description: alright, can you pwn it with "HARDENED" freelist?
+  - id: level6
+    name: Level-6
+    description: now, we are working on "real" linux kernel heap!
+  - id: level7
+    name: Level-7
+    description: msg the kernel for the win!
+  - id: level8
+    name: Level-8
+    description: no more USERCOPY, what now?
diff --git a/kernel-exploitation/test/vmlinux0 b/kernel-exploitation/test/vmlinux0
@@ -0,0 +1 @@
+../../lfs/vmlinux0