Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
AxelRoudaut committed Mar 2, 2018
1 parent 4b4163f commit 2886f0c
Showing 1 changed file with 11 additions and 1 deletion.
12 changes: 11 additions & 1 deletion Linux_Exploit/perso/LEAK_CVE-2017-1000250/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,14 @@ remote leak heap data from linux devices with bluetooth open

***Only for linux devices***

cf: http://go.armis.com/hubfs/BlueBorne%20Technical%20White%20Paper-1.pdf?t=1517293112971
Here the white paper explaining the vulnerabilities: [link](http://go.armis.com/hubfs/BlueBorne%20Technical%20White%20Paper-1.pdf?t=1517293112971)

Here the Bluez code of the vulnerable function [service_search_attr_req](https://sourcecodebrowser.com/bluez/4.81/sdpd-request_8c.html#a88a67e8cc83d0f53b65629478bc16a06)

Here some informations about the functions:
- [socket()](http://pubs.opengroup.org/onlinepubs/7908799/xns/socket.html)
- [bind()](http://pubs.opengroup.org/onlinepubs/7908799/xns/bind.html)
- [connect()](http://pubs.opengroup.org/onlinepubs/7908799/xns/connect.html)
- [send()](http://pubs.opengroup.org/onlinepubs/7908799/xns/send.html)
- [recv()](http://pubs.opengroup.org/onlinepubs/7908799/xns/recv.html)
- [Here more explanations about this functions](http://www.i3s.unice.fr/~tettaman/Classes/L2I/ProgSys/11_IntroSockets.pdf)

0 comments on commit 2886f0c

Please sign in to comment.