full-disclosure

Open Source and information security mailing list archives

Date: Fri, 13 Mar 2015 05:34:40 +0000
From: halfdog <me@...fdog.net>
To: fulldisclosure@...lists.org
Subject: [FD] Having fun with dmesg

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello list,

I guess this must be common knowledge somehow already, but although hidden in plain sight, it did not make it do me yet. So [1] is just a very quick, dirty and incomplete writeup of thoughts how to use dmesg to

* Get knowledge about e.g. kernel task structure address
* Bypass ALSR in forking applications
* Get logging information from outside a chroot jail
* Get additional network information from iptables LOG target

hd

[1] http://www.halfdog.net/Security/2015/HavingFunWithDmesg/

- -- 
http://www.halfdog.net/
PGP: 156A AE98 B91F 0114 FE88  2BD8 C459 9386 feed a bee
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlUCduoACgkQxFmThv7tq+6WrQCggiJVjitEEdLXuqIVbRVaMrRv
gUAAn1BmMtSDll3RDNZiv88ghao2oYhd
=zEHB
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives