Sploitus

Exploit for Use After Free in Linux Linux Kernel

gitee · 2021-09-03

Exploit Code

MARKDOWN8 lines
## https://sploitus.com/exploit?id=E4B8BDD4-9CDE-5B52-936E-00E9021D4924
This is a collection of exploit code for various Linux kernel vulnerabilities, specifically CVE-2016-8655, CVE-2017-1000112, CVE-2017-7308, and CVE-2018-18955. The exploits are written in C and use various techniques such as AF_PACKET race condition, UDP fragmentation offset, and Linux kernel AF_PACKET packet_set_ring heap out-of-bounds write.

The exploits target different versions of the Linux kernel, including Ubuntu 14.04 and 16.04, and Linux Mint. The code includes various helper functions and scripts to set up the exploit environment, map subordinate IDs, and execute the exploit payload.

The CVE-2018-18955 exploit is notable for its use of a subuid shell, which is a custom shell that is created to execute the exploit payload. The subuid shell is created using the `subshell.c` and `subuid_shell.c` files, which use the `unshare` system call to create a new user namespace and the `socketpair` system call to communicate with the child process.

The exploits are designed to be run from the command line, and the code includes various scripts to compile and set up the exploit environment. The scripts use the `gcc` compiler to compile the exploit