Chapter 3 Stairway to Successful Kernel Exploitation

Information in this chapter

  • A Look at the Architecture Level

  • The Execution Step

  • The Triggering Step

  • The Information-Gathering Step

Introduction

In Chapter 2 we said a bug becomes a security issue as soon as someone figures out how to take advantage of it. That's what we'll focus on in this chapter: how to develop a successful exploit. Demonstrating that a vulnerability exists (e.g., via proof-of-concept code) is only a first step in kernel exploitation. The exploit has to work. A piece of code that gives you full privileges and then immediately panics the machine is clearly of no use.

To develop a good exploit, you must understand the vulnerability you are targeting, the ...

Get A Guide to Kernel Exploitation now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.