greyshell/exploit_dev repository overview

This image provides a pre-configured environment with all the tools necessary to replicate the techniques described in the Stack Canary Bypass Write-Up⁠.

Make sure the ASLR status of your host system is set o 2.

cat /proc/sys/kernel/randomize_va_space

Replicating Dynamic Analysis Section:

Once inside the container, follow these steps to explore the Dynamic Analysis section

1. Start a tmux session:

tmux new -s exploit_dev -n canary

1. Navigate to the lab directory:

cd exploit_lab/canary_bypass

1. Run the exploit: Execute the following command within your tmux session to interact with the binary via pwndbg:

python exploit01.py

⁠Container Management

⁠Download the image

sudo docker pull greyshell/exploit_dev:latest

⁠Run container and maps host's /tmp directory to /home/asinha/host_os inside the container

sudo docker run -dit --name exploit_dev -v /tmp:/home/asinha/host_os greyshell/exploit_dev

⁠Enter into the running container

sudo docker exec -it exploit_dev /bin/zsh

⁠Exit without stopping container

from the container running terminal

exit

⁠Stop container manually

sudo docker stop exploit_dev

⁠Start the container again later

sudo docker start exploit_dev
sudo docker exec -it exploit_dev /bin/zsh

⁠Remove / delete the container

sudo docker rm -f exploit_dev

⁠Save the State of a container with tag

When you modified the container and want to save it as a new image

sudo docker commit exploit_dev greyshell/exploit_dev:v1

⁠Remove the image

sudo docker rmi -f greyshell/exploit_dev

⁠Remove everything

sudo docker system prune -a --volumes