[Bug 832698] New: Review Request: CERT Triage tools - a gdb extension similar to microsoft's !exploitable
by Red Hat Bugzilla
Bug ID: 832698
QA Contact: extras-qa(a)fedoraproject.org
Summary: Review Request: CERT Triage tools - a gdb extension
similar to microsoft's !exploitable
Story Points: ---
Mount Type: ---
Component: Package Review
Spec URL: http://fedorapeople.org/~bressers/exploitable-review/exploitable.spec
Description: CERT Triage tools, which currently only contain a gdb extension
Fedora Account System Username: bressers
I've packaged up CERT's Triage tools, which are really just a gdb extension
right now. The package installs an extension specific python module, and a
script into /usr/bin
The script doesn't currently have a man page (it's on my list). I wanted to
start the review now as I'm certain this will need some work.
The extension basically will show the user if their application crash is
exploitable or not (it's certainly not perfect, but getting this to a wider
audience should help improve it greatly).
bress@localhost ~ % cert-triage /tmp/test
warning: Current output protocol does not support redirection
Description: Access violation near NULL on destination operand
Short description: DestAvNearNull (14/21)
Exploitability Classification: PROBABLY_EXPLOITABLE
Explanation: The target crashed on an access violation at an address matching
the destination operand of the instruction. This likely indicates a write
access violation, which means the attacker may control write address and/or
value. However, it there is a chance it could be a NULL dereference.
Other tags: AccessViolation (20/21)
Additionally this can be run directly from gdb via the 'exploitable' command.
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 11 months