├── .gitignore ├── LICENSE ├── Makefile ├── README.md ├── cloned_binary.c ├── cloned_binary.h ├── drofune.c ├── drofune.h ├── drop_caps.c ├── drop_caps.h ├── exec.c ├── exec.h ├── exploits ├── CVE-2019-5736 │ ├── Makefile │ ├── README.md │ ├── clone_binary_mitigation.gif │ ├── exploit.c │ └── how_it_works.gif ├── README.md ├── chroot_jailbreak │ ├── Makefile │ ├── README.md │ ├── drop_caps_mitigation.gif │ ├── exploit.c │ ├── how_it_works.gif │ └── pivot_root_mitigation.gif └── insecure_join │ ├── Makefile │ ├── README.md │ ├── drop_caps_mitigation.gif │ ├── exploit.c │ ├── how_it_works.gif │ ├── secure_join_mitigation.gif │ └── shellcode.asm ├── run.c ├── run.h ├── utils.c └── utils.h /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/Makefile -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/README.md -------------------------------------------------------------------------------- /cloned_binary.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/cloned_binary.c -------------------------------------------------------------------------------- /cloned_binary.h: -------------------------------------------------------------------------------- 1 | int ensure_cloned_binary(void); 2 | -------------------------------------------------------------------------------- /drofune.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/drofune.c -------------------------------------------------------------------------------- /drofune.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/drofune.h -------------------------------------------------------------------------------- /drop_caps.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/drop_caps.c -------------------------------------------------------------------------------- /drop_caps.h: -------------------------------------------------------------------------------- 1 | int drop_caps(void); -------------------------------------------------------------------------------- /exec.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exec.c -------------------------------------------------------------------------------- /exec.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exec.h -------------------------------------------------------------------------------- /exploits/CVE-2019-5736/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/CVE-2019-5736/Makefile -------------------------------------------------------------------------------- /exploits/CVE-2019-5736/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/CVE-2019-5736/README.md -------------------------------------------------------------------------------- /exploits/CVE-2019-5736/clone_binary_mitigation.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/CVE-2019-5736/clone_binary_mitigation.gif -------------------------------------------------------------------------------- /exploits/CVE-2019-5736/exploit.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/CVE-2019-5736/exploit.c -------------------------------------------------------------------------------- /exploits/CVE-2019-5736/how_it_works.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/CVE-2019-5736/how_it_works.gif -------------------------------------------------------------------------------- /exploits/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/README.md -------------------------------------------------------------------------------- /exploits/chroot_jailbreak/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/chroot_jailbreak/Makefile -------------------------------------------------------------------------------- /exploits/chroot_jailbreak/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/chroot_jailbreak/README.md -------------------------------------------------------------------------------- /exploits/chroot_jailbreak/drop_caps_mitigation.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/chroot_jailbreak/drop_caps_mitigation.gif -------------------------------------------------------------------------------- /exploits/chroot_jailbreak/exploit.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/chroot_jailbreak/exploit.c -------------------------------------------------------------------------------- /exploits/chroot_jailbreak/how_it_works.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/chroot_jailbreak/how_it_works.gif -------------------------------------------------------------------------------- /exploits/chroot_jailbreak/pivot_root_mitigation.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/chroot_jailbreak/pivot_root_mitigation.gif -------------------------------------------------------------------------------- /exploits/insecure_join/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/insecure_join/Makefile -------------------------------------------------------------------------------- /exploits/insecure_join/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/insecure_join/README.md -------------------------------------------------------------------------------- /exploits/insecure_join/drop_caps_mitigation.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/insecure_join/drop_caps_mitigation.gif -------------------------------------------------------------------------------- /exploits/insecure_join/exploit.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/insecure_join/exploit.c -------------------------------------------------------------------------------- /exploits/insecure_join/how_it_works.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/insecure_join/how_it_works.gif -------------------------------------------------------------------------------- /exploits/insecure_join/secure_join_mitigation.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/insecure_join/secure_join_mitigation.gif -------------------------------------------------------------------------------- /exploits/insecure_join/shellcode.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/exploits/insecure_join/shellcode.asm -------------------------------------------------------------------------------- /run.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/run.c -------------------------------------------------------------------------------- /run.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/run.h -------------------------------------------------------------------------------- /utils.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/utils.c -------------------------------------------------------------------------------- /utils.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wata727/drofune/HEAD/utils.h --------------------------------------------------------------------------------