Skip to content

Commit 12df481

Browse files
author
emily747
committed
added how to kernel updates
1 parent 0c1293d commit 12df481

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

main/content/post/how-to-kernel-pwn.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ exec busybox init
6262
6363
### Adding a custom userspace binary
6464
65-
Notice in the above script that the actual script switches to `/bin/sh` at the final (`setsid`) step. If you wanted, you could replace this with another custom compiled binary in `/challenge`. This would allow you to give a userspace pwn into kernel pwn if you wanted to (for instance, shellcoding into kernel pwn).
65+
Notice in the above script that the actual script switches to a login shell at the final step in the `busybox init`. If you wanted, you could simply rebuild the init script from scratch to launch directly into your binary. This would allow you to give a userspace pwn into kernel pwn if you wanted to (for instance, shellcoding into kernel pwn). Alternatively, you can set a users shell to your custom binary, which would launch them directly into the userspace program.
6666
6767
Alternatively, if you wanted to build a jail breakout challenge, this same process could be used to provide kernel isolation.
6868

0 commit comments

Comments
 (0)