{"provider_url":"https://hatena.blog","title":"Sharif CTF 2018 kdb writeup","categories":[],"version":"1.0","author_name":"hama7230","author_url":"https://blog.hatena.ne.jp/hama7230/","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fhama.hatenadiary.jp%2Fentry%2F2018%2F12%2F04%2F000000\" title=\"Sharif CTF 2018 kdb writeup - \u30d6\u30ed\u30b0\u672a\u6e80\u306e\u306a\u306b\u304b\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_url":"https://hama.hatenadiary.jp/","blog_title":"\u30d6\u30ed\u30b0\u672a\u6e80\u306e\u306a\u306b\u304b","published":"2018-12-04 00:00:00","width":"100%","height":"190","provider_name":"Hatena Blog","description":"\u306f\u3058\u3081\u306b \u4e00\u4ebawriteup advent calendar\u306e4\u65e5\u76ee\u3067\u3059\u30021\u65e51\u554f\u5206\u306ewriteup\u3092\u76ee\u6a19\u306b\u9811\u5f35\u3063\u3066\u3044\u304d\u307e\u3059\u3002 4\u65e5\u76ee\u306e\u554f\u984c\u306f\u3001Sharif CTF 2018\u3067\u51fa\u984c\u3055\u308c\u305f\u300ckdb\u300d\u3002kUAF (kernel Use After Free) \u3092\u8d77\u70b9\u3068\u3057\u305fkernel exploit\u554f\u984c\u3067\u521d\u3081\u3066\u306e\u4eba\u306b\u30aa\u30b9\u30b9\u30e1\u3067\u3059\u3002 \u30ab\u30fc\u30cd\u30eb\u306e\u60c5\u5831 (\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u69cb\u306a\u3069) \u914d\u5e03\u30d5\u30a1\u30a4\u30eb\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3002 run.sh\u3092\u4e2d\u8eab\u3092\u898b\u3066\u307f\u308b\u3068\u3001smep\u3001kaslr\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3002 % ls bzImage rootfs.cpio run.sh* % cat run.sh #!/bin/sh qemu-sy\u2026","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/h/hama7230/20181120/20181120215120.png","url":"https://hama.hatenadiary.jp/entry/2018/12/04/000000","type":"rich"}