-
-
Notifications
You must be signed in to change notification settings - Fork 131
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for Linux userland ELF snapshots and fuzzing #192
Merged
Commits on Jan 24, 2024
-
Add support for Linux userland ELF snapshots and fuzzing.
This is based on Kasamir123's pull request at 0vercl0k#102 plus some scripts in snapchange for automatically setting up a Linux VM target. The following improvements have been made as compared to Kasamir123's original pull request: * Fixed bug when calling mlockall, allowing us to remove page touching code * Code requires no custom #ifdefs in wtf * Linux snapshots work w/fuzzing via KVM. Kasamir123's code had some issues with gathering segment registers, and our updates fix these issues, allowing for KVM support * Kasamir123's code injects shellcode into the target process by overwriting code, but never restored the original code. We now restore the original code * Snapshotting is more streamlined, only taking a few manual steps once everything is configured * Some improvements from 0vercl0k's suggestions from ELF Snapshotting and Fuzzing 0vercl0k#102, like implementing raw2dmp in Python * Support for setting breakpoints on symbols in ELF targets plus use of symbols in fuzz harnesses * IDA script for generating coverage breakpoints list so that targets can be fuzzed with KVM * Target VM can run with HW acceleration enabled, Kasamir123's scripts for running the VM and taking a snapshot only worked with SW emulation * Works with recent Linux kernel versions
Configuration menu - View commit details
-
Copy full SHA for 807f8bc - Browse repository at this point
Copy the full SHA 807f8bcView commit details
Commits on Feb 3, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 21e918e - Browse repository at this point
Copy the full SHA 21e918eView commit details
Commits on Feb 11, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 644eea7 - Browse repository at this point
Copy the full SHA 644eea7View commit details
Commits on Feb 16, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 559cb2a - Browse repository at this point
Copy the full SHA 559cb2aView commit details
Commits on Feb 17, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 36d65a3 - Browse repository at this point
Copy the full SHA 36d65a3View commit details -
Configuration menu - View commit details
-
Copy full SHA for 9a57e0c - Browse repository at this point
Copy the full SHA 9a57e0cView commit details -
Configuration menu - View commit details
-
Copy full SHA for 9cfc8c0 - Browse repository at this point
Copy the full SHA 9cfc8c0View commit details -
Configuration menu - View commit details
-
Copy full SHA for caf069c - Browse repository at this point
Copy the full SHA caf069cView commit details -
Configuration menu - View commit details
-
Copy full SHA for f7eb658 - Browse repository at this point
Copy the full SHA f7eb658View commit details -
Configuration menu - View commit details
-
Copy full SHA for 0ff1389 - Browse repository at this point
Copy the full SHA 0ff1389View commit details -
Configuration menu - View commit details
-
Copy full SHA for 5444905 - Browse repository at this point
Copy the full SHA 5444905View commit details -
Configuration menu - View commit details
-
Copy full SHA for 5b31d1f - Browse repository at this point
Copy the full SHA 5b31d1fView commit details -
Configuration menu - View commit details
-
Copy full SHA for 491d1e7 - Browse repository at this point
Copy the full SHA 491d1e7View commit details -
Configuration menu - View commit details
-
Copy full SHA for efc04a8 - Browse repository at this point
Copy the full SHA efc04a8View commit details -
Configuration menu - View commit details
-
Copy full SHA for 5113150 - Browse repository at this point
Copy the full SHA 5113150View commit details -
Configuration menu - View commit details
-
Copy full SHA for 6727d41 - Browse repository at this point
Copy the full SHA 6727d41View commit details -
Configuration menu - View commit details
-
Copy full SHA for 1c4813a - Browse repository at this point
Copy the full SHA 1c4813aView commit details -
Configuration menu - View commit details
-
Copy full SHA for ff0e0cc - Browse repository at this point
Copy the full SHA ff0e0ccView commit details -
Configuration menu - View commit details
-
Copy full SHA for bf7d7b0 - Browse repository at this point
Copy the full SHA bf7d7b0View commit details -
Configuration menu - View commit details
-
Copy full SHA for 294f586 - Browse repository at this point
Copy the full SHA 294f586View commit details
Commits on Feb 18, 2024
-
Configuration menu - View commit details
-
Copy full SHA for aff2aef - Browse repository at this point
Copy the full SHA aff2aefView commit details -
Configuration menu - View commit details
-
Copy full SHA for 6ab9824 - Browse repository at this point
Copy the full SHA 6ab9824View commit details -
Configuration menu - View commit details
-
Copy full SHA for 29686bf - Browse repository at this point
Copy the full SHA 29686bfView commit details -
Configuration menu - View commit details
-
Copy full SHA for 7e23f31 - Browse repository at this point
Copy the full SHA 7e23f31View commit details -
Configuration menu - View commit details
-
Copy full SHA for 42b42fe - Browse repository at this point
Copy the full SHA 42b42feView commit details
Commits on Feb 19, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 3af96df - Browse repository at this point
Copy the full SHA 3af96dfView commit details -
Configuration menu - View commit details
-
Copy full SHA for 88ce23a - Browse repository at this point
Copy the full SHA 88ce23aView commit details -
Configuration menu - View commit details
-
Copy full SHA for fb16023 - Browse repository at this point
Copy the full SHA fb16023View commit details -
Configuration menu - View commit details
-
Copy full SHA for 09c0613 - Browse repository at this point
Copy the full SHA 09c0613View commit details -
Configuration menu - View commit details
-
Copy full SHA for d9040e5 - Browse repository at this point
Copy the full SHA d9040e5View commit details -
Configuration menu - View commit details
-
Copy full SHA for dd49d42 - Browse repository at this point
Copy the full SHA dd49d42View commit details
Commits on Mar 27, 2024
-
Configuration menu - View commit details
-
Copy full SHA for ec7a0ba - Browse repository at this point
Copy the full SHA ec7a0baView commit details -
Configuration menu - View commit details
-
Copy full SHA for 87b5dcd - Browse repository at this point
Copy the full SHA 87b5dcdView commit details
Commits on Mar 28, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 48790ad - Browse repository at this point
Copy the full SHA 48790adView commit details -
Merge branch 'linux-snapshot' of github.com:jasocrow/wtf-linux-snapsh…
…ot into linux-snapshot
Configuration menu - View commit details
-
Copy full SHA for 9abc678 - Browse repository at this point
Copy the full SHA 9abc678View commit details -
Configuration menu - View commit details
-
Copy full SHA for ff951c1 - Browse repository at this point
Copy the full SHA ff951c1View commit details -
Configuration menu - View commit details
-
Copy full SHA for a482843 - Browse repository at this point
Copy the full SHA a482843View commit details -
Configuration menu - View commit details
-
Copy full SHA for ea69f12 - Browse repository at this point
Copy the full SHA ea69f12View commit details -
Configuration menu - View commit details
-
Copy full SHA for 79bc9ea - Browse repository at this point
Copy the full SHA 79bc9eaView commit details
Commits on Mar 29, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 02ffb8f - Browse repository at this point
Copy the full SHA 02ffb8fView commit details -
Configuration menu - View commit details
-
Copy full SHA for 3f7004c - Browse repository at this point
Copy the full SHA 3f7004cView commit details -
Configuration menu - View commit details
-
Copy full SHA for f303cb7 - Browse repository at this point
Copy the full SHA f303cb7View commit details
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.