Navigation X
ALERT
Click here to register with a few steps and explore all our cool stuff we have to offer!



 679

DIRTY COW exploit explanation.

by J_SGF - 18 February, 2022 - 04:46 PM
This post is by a banned member (J_SGF) - Unhide
J_SGF  
Supreme
834
Posts
519
Threads
6 Years of service
#1
dirty cow:
this exploit is a result of race condition within a kernel :
What is Race condition ?
-
A race condition is  when thread a,b execute at the same time . mostly it will result in a bug or a unknown result it depend on the kernel .

here is the code ditrycow exploit
-https://github.com/caldonovan/Dirty-COW-Exploit/blob/master/dirtyc0w.c
let's check it out
in the main function it tell you that it accept 2 parameter File / and string to write to .
then it use mmap what is this ?
mmap function ?
mmap create a private virtual pointer for the file that it takes  and it privates so we can w/r anything into it .

the kernel need to find physical memory to store out virtual memory .
next we write anything to our private virtual memory .however we are not going to write to mmap pointer gave we are gonna write to (proc/self/mem)
At this point, the kernel has to figure out where in physical memory (s)he'll actually be writing.
this where cow(copy on write)
And the kernel is tricked into thinking our write was for the original
.
all credit goes to https://www.cs.toronto.edu/~arnold/427/1.../demo.html
[Image: 2hWB82Z.gif]
This post is by a banned member (clxdy) - Unhide
clxdy  
Registered
374
Posts
47
Threads
5 Years of service
#2
this is old af tho, i did a similar one for my c project but good leak +1
This post is by a banned member (Scuzzer33) - Unhide
Scuzzer33  
Registered
40
Posts
0
Threads
2 Years of service
#3
Let’s seee
This post is by a banned member (Isaac) - Unhide
Isaac  
Registered
37
Posts
44
Threads
3 Years of service
#4
Nice leak!
[Image: 4Ev9Kma.png]

Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
or
Sign in
Already have an account? Sign in here.


Forum Jump:


Users browsing this thread: 1 Guest(s)