Naslr - A POC to start a bash shell with no ASLR via SYS_personality.

naslr.c

/* Naslr: Starts a bash shell with no ASLR
 * Build: gcc naslr.c -o naslr
 *
 * Towel - 2017
 */
#include <sys/personality.h>
#include <syscall.h>
#include <unistd.h>
#include <stdlib.h>
#include <err.h>

int main(int argc, char *argv[])
{
    /* Syscall 0x87 - Set the process execution domain */
    ((long)syscall(SYS_personality, 0x0040000));

    execv("/bin/bash", argv);
    err(EXIT_FAILURE, "\n[!] Failed to start %s", "/bin/bash");

    return EXIT_FAILURE;
}