RSSAmplifier

Blog

Dongliang Mu de Blog

Blog Website For Software/System Security Researcher and Linuxer

mudongliang.github.ioRSS feed ↗10 posts

Latest posts

(untitled)

References References [1] trace-cmd: A front-end for Ftrace [2] ftrace: trace your kernel functions! [3] trace-cmd(1) — Linux manual page

Vagrant cloud, box and insecure key pairs

Problems Naive Solution Problems Vagrant leverages a insecure public/private keypair to create base boxes so that vagrant installations can automatically SSH into the boxes. By default, vagrant up generates a new public/private keypair locally and inserts this public keypair into the virtual machine. The private key is stored in the file - .vagrant/machines/default/virtualbox/private_key . Naive…

Debian compile Linux Kernel from Source Code

安装依赖软件 下载源代码 解压压缩包 配置 编译Linux内核 安装依赖软件 sudo apt install build-essential libncurses5-dev libssl-dev flex bison libelf-dev bc 下载源代码 wget https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.1.38.tar.xz 解压压缩包 tar -xvf linux-6.1.38.tar.xz 配置 make allyesconfig 编译Linux内核 make -j40

Set http/https proxy for GNOME Terminal

Add the following variable to ~/.bashrc export http_proxy="http://127.0.0.1:12333" export https_proxy="http://127.0.0.1:12333"

My Favourite Gnome Extensions

The Gnome Extensions are listed at https://extensions.gnome.org/ . My Favourite Gnome Extensions are in the following: Must-have Caffeine AppIndicator and KStatusNotifierItem Support Bing Wallpaper Changer Coverflow Alt-Tab UpTime Indicator User Themes Workspace Indicator Applications Overview Tooltip Interesting Appfolders Management extensions EasyScreenCast Battery Status Auto Move Windows…

Debian 12 & PVE 8.0 配置

系统配置 更换国内较快源 添加sudo权限 转换到 Debian Rolling Testing (可选) 磁盘挂载 安装常用软件 安装Openssh server 安装百度网盘 安装谷歌浏览器 安装 Thunderbird 邮件客户端 安装中文输入法 Fcitx 安装 Vagrant 和 VirtualBox 安装一些自己喜欢的应用程序 系统清理 删除无用软件 美化 安装字体 Gnome Shell Extensions 系统配置 更换国内较快源 国内比较快速和稳定的源有以下几种: ftp.cn.debian.org 或 中科大开源软件镜像 清华大学开源软件镜像站 注:华科大将在今年暑假恢复镜像源站( https://mirros.hust.edu.cn ),目前正在校园网内测。 以中科大开源镜像站为例,参考 List Generator 或者 Debian 源使用帮助…

2018 0CTF Finals Baby Kernel

Environment Problem Analysis Double Fetch vulnerability Exploit Reference Environment ubuntu 20.04 qemu 7.0.0 kernel version 4.15.0-22-generic SMP mod_unload sjy@ubuntu:~/ctf/2018-0ctf-final-baby $ strings baby.ko | grep vermagic = vermagic = 4.15.0-22-generic SMP mod_unload qemu stratup script qemu-system-x86_64 \ -m 256M -smp 2,cores=2,threads=1 \ -kernel ./vmlinuz-4.15.0-22-generic \ -initrd…

ret2usr - 强网杯2018 - core

ret2usr Prevention SMEP Bypass Reference ret2usr Attachment The ret2usr (return-to-user) attack leverages the fact that userspace processes cannot access kernel space, but kernel space can access user space to direct kernel code or data streams to user controls and execute user space code with the ring 0 privilege to complete operations such as privilege escalation. This vulnerability analysis is…

Kernel ROP - 强网杯2018 - core

Kernel ROP Check Materials Vulnerability Analysis Summary Exploit Reference Kernel ROP Check Materials Attachment lzy@lzy-virtual-machine:~ $ tar xvf core_give.tar give_to_player/ give_to_player/bzImage give_to_player/core.cpio give_to_player/start.sh give_to_player/vmlinux lzy@lzy-virtual-machine:~ $ cd give_to_player/ lzy@lzy-virtual-machine:~/give_to_player $ bat start.sh…

Debian 11 配置

添加sudo权限 添加较快源 转换到 Debian Rolling Testing (可选) 系统清理 删除无用软件 美化 安装字体 去除GNOME难看的边框 安装常用软件 安装Openssh server 安装中文输入法 Fcitx 安装Chrome浏览器 安装 Vagrant 和 VirtualBox 安装一些自己喜欢的应用程序 磁盘管理 整理一下自己文件和分区 Gnome Shell Extensions 添加sudo权限 首先,Debian 镜像默认没有安装 sudo ( apt-get install sudo ) 然后,编辑 /etc/sudoers ( gedit /etc/sudoers ) root ALL=(ALL) ALL <your_user_name> ALL=(ALL) ALL 添加较快源 国内比较快速和稳定的源有以下两种: ftp.cn.debian.org…