CVE-2019-11477 PoC — Linux kernel 输入验证错误漏洞

介绍

# cve-2019-11477-poc

## Simple Test
1. Start two VMs
 - one for an SSL server and the other for an SSL client

2. [Server] Execute the server application
 - cd apps
 - ./server.sh 7000

3. [Client] Install the required packages
 - sudo apt-get install libmnl-dev
 - sudo apt-get install libnetfilter-queue-dev

4. [Client] Add one record to /etc/hosts in the VM for a client
 - <the IP Address of the server> www.alice.com

5. [Client] Insert the kernel module into the client's VM
 - cd module
 - make
 - sudo insmod interceptor.ko

6. [Client] Execute the craft netfilter application
 - cd craft
 - make
 - sudo ./craft

7. [Client] Execute the client application
 - cd apps
 - ./client.sh www.alice.com 7000 index.html

文件快照

备注