From 8e7160d7dd886b772686f7c54afd5c103f76c45e Mon Sep 17 00:00:00 2001 From: Vitaly Nikolenko Date: Wed, 20 Jan 2016 15:06:35 +1100 Subject: [PATCH] fixed readme --- README.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 3947d34..448eff4 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -# Linux Kernl ROP demo +# Linux Kernel ROP demo This is a vulnerable Linux kernel driver used to demonstrate in-kernel privilege escalation ROP (Return Oriented Programming) chain in practice. The @@ -13,3 +13,11 @@ the function address to be executed. * drv.c - vulnerable kernel driver * trigger.c - user-space application to trigger the OOB access via the provided ioctl + +The goal is to construct and execute a ROP chain that will satisfy the +following requirements: + +* Execute a privilege escalation payload +* Data residing in user space may be referenced (i.e., "fetching" data from + user space is allowed) +* Instructions residing in user space may not be executed