From cc974ee475d7a5a9acdbfd9153bd3765329b1c36 Mon Sep 17 00:00:00 2001 From: Andrey Arapov Date: Sun, 9 Oct 2016 15:50:37 +0200 Subject: [PATCH] add asciinema demo --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index a4c2c4c..3d61586 100644 --- a/README.md +++ b/README.md @@ -5,6 +5,8 @@ privilege escalation ROP (Return Oriented Programming) chain in practice. The article URL for Part 1 is available at . +[![asciicast](https://asciinema.org/a/2yy003e6xd0s4qrfcfkurzmge.png)](https://asciinema.org/a/2yy003e6xd0s4qrfcfkurzmge) + The driver module is vulnerable to OOB access and allows arbitrary code execution. An arbitrary offset can be passed from user space via the provided ioctl(). This offset is then used as the index for the 'ops' array to obtain