Skip to content

Instantly share code, notes, and snippets.

View imlk0's full-sized avatar
🛌
in sleeping

Kun Lai imlk0

🛌
in sleeping
View GitHub Profile
@imlk0
imlk0 / 80-imlk-ebtables-ipv6
Created August 30, 2022 01:08
Upload this file to /etc/hotplug.d/iface/
#!/bin/sh
# imlk: setup ipv6 bridge while ipv4 is nat mode. see https://jethro.fun/index.php/archives/162/
logger -t imlk-ebtables-ipv6 "hotplugin event: $INTERFACE -> $ACTION"
if [[ "$INTERFACE" != "wan" ]]; then
exit
fi

GSoC 2021 Work Product Submission

Describe my work briefly

proot-rs is an unprivileged chroot, written in Rust. The current implementation of proot-rs is not yet ready to be used.

What I need to to is finish the first release ready version, more specifically, including implementing path translation, implementing loading ELF files and script files, and adding multi-tracee support.

What is done

The harm of loopholes

By sending a request to the server, a denial of service/slow service can be achieved

Vulnerability details

With a carefully constructed request header, we can bypass the Loop request defense. With HTTP redirection (301/302), Loop request attack can be realized.

The program has a publicly accessible external API: