mirror of
https://github.com/h3xduck/TripleCross.git
synced 2025-12-24 10:23:08 +08:00
Finished buffer overflow subsection
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
This is pdfTeX, Version 3.14159265-2.6-1.40.21 (TeX Live 2020/Debian) (preloaded format=pdflatex 2022.4.27) 6 JUN 2022 21:52
|
||||
This is pdfTeX, Version 3.14159265-2.6-1.40.21 (TeX Live 2020/Debian) (preloaded format=pdflatex 2022.4.27) 7 JUN 2022 12:45
|
||||
entering extended mode
|
||||
restricted \write18 enabled.
|
||||
%&-line parsing enabled.
|
||||
@@ -1180,13 +1180,13 @@ LaTeX Font Info: Trying to load font information for U+txsyc on input line 8
|
||||
|
||||
(/usr/share/texlive/texmf-dist/tex/latex/txfonts/utxsyc.fd
|
||||
File: utxsyc.fd 2000/12/15 v3.1
|
||||
))
|
||||
) [10
|
||||
|
||||
])
|
||||
\tf@lof=\write7
|
||||
\openout7 = `document.lof'.
|
||||
|
||||
[10
|
||||
|
||||
] [11] [12]
|
||||
[11] [12]
|
||||
(./document.lot [13
|
||||
|
||||
])
|
||||
@@ -1211,72 +1211,72 @@ Overfull \hbox (0.50073pt too wide) in paragraph at lines 355--356
|
||||
[3] [4]
|
||||
Chapter 2.
|
||||
|
||||
LaTeX Warning: Reference `section:TODO' on page 5 undefined on input line 412.
|
||||
LaTeX Warning: Reference `section:TODO' on page 5 undefined on input line 413.
|
||||
|
||||
<images//classic_bpf.jpg, id=616, 588.1975pt x 432.61626pt>
|
||||
<images//classic_bpf.jpg, id=622, 588.1975pt x 432.61626pt>
|
||||
File: images//classic_bpf.jpg Graphic file (type jpg)
|
||||
<use images//classic_bpf.jpg>
|
||||
Package pdftex.def Info: images//classic_bpf.jpg used on input line 426.
|
||||
Package pdftex.def Info: images//classic_bpf.jpg used on input line 427.
|
||||
(pdftex.def) Requested size: 341.43306pt x 251.12224pt.
|
||||
[5
|
||||
|
||||
] [6 <./images//classic_bpf.jpg>]
|
||||
<images//cbpf_prog.jpg, id=634, 403.5075pt x 451.6875pt>
|
||||
<images//cbpf_prog.jpg, id=640, 403.5075pt x 451.6875pt>
|
||||
File: images//cbpf_prog.jpg Graphic file (type jpg)
|
||||
<use images//cbpf_prog.jpg>
|
||||
Package pdftex.def Info: images//cbpf_prog.jpg used on input line 453.
|
||||
Package pdftex.def Info: images//cbpf_prog.jpg used on input line 454.
|
||||
(pdftex.def) Requested size: 227.62204pt x 254.80415pt.
|
||||
[7 <./images/cBPF_prog.jpg>]
|
||||
<images//bpf_instructions.png, id=644, 380.92313pt x 475.27562pt>
|
||||
<images//bpf_instructions.png, id=650, 380.92313pt x 475.27562pt>
|
||||
File: images//bpf_instructions.png Graphic file (type png)
|
||||
<use images//bpf_instructions.png>
|
||||
Package pdftex.def Info: images//bpf_instructions.png used on input line 493.
|
||||
Package pdftex.def Info: images//bpf_instructions.png used on input line 494.
|
||||
(pdftex.def) Requested size: 227.62204pt x 283.99998pt.
|
||||
[8 <./images//bpf_instructions.png>]
|
||||
<images//bpf_address_mode.png, id=655, 417.05812pt x 313.67188pt>
|
||||
<images//bpf_address_mode.png, id=661, 417.05812pt x 313.67188pt>
|
||||
File: images//bpf_address_mode.png Graphic file (type png)
|
||||
<use images//bpf_address_mode.png>
|
||||
Package pdftex.def Info: images//bpf_address_mode.png used on input line 509.
|
||||
Package pdftex.def Info: images//bpf_address_mode.png used on input line 510.
|
||||
(pdftex.def) Requested size: 227.62204pt x 171.19905pt.
|
||||
[9 <./images//bpf_address_mode.png>]
|
||||
<images//tcpdump_example.png, id=667, 534.99875pt x 454.69875pt>
|
||||
<images//tcpdump_example.png, id=673, 534.99875pt x 454.69875pt>
|
||||
File: images//tcpdump_example.png Graphic file (type png)
|
||||
<use images//tcpdump_example.png>
|
||||
Package pdftex.def Info: images//tcpdump_example.png used on input line 524.
|
||||
Package pdftex.def Info: images//tcpdump_example.png used on input line 525.
|
||||
(pdftex.def) Requested size: 284.52756pt x 241.82869pt.
|
||||
<images//cBPF_prog_ex_sol.png, id=670, 242.9075pt x 321.2pt>
|
||||
<images//cBPF_prog_ex_sol.png, id=676, 242.9075pt x 321.2pt>
|
||||
File: images//cBPF_prog_ex_sol.png Graphic file (type png)
|
||||
<use images//cBPF_prog_ex_sol.png>
|
||||
Package pdftex.def Info: images//cBPF_prog_ex_sol.png used on input line 535.
|
||||
Package pdftex.def Info: images//cBPF_prog_ex_sol.png used on input line 536.
|
||||
(pdftex.def) Requested size: 170.71652pt x 225.74026pt.
|
||||
[10 <./images//tcpdump_example.png>] [11 <./images//cBPF_prog_ex_sol.png>]
|
||||
<images//ebpf_arch.jpg, id=688, 739.76375pt x 472.76625pt>
|
||||
<images//ebpf_arch.jpg, id=694, 739.76375pt x 472.76625pt>
|
||||
File: images//ebpf_arch.jpg Graphic file (type jpg)
|
||||
<use images//ebpf_arch.jpg>
|
||||
Package pdftex.def Info: images//ebpf_arch.jpg used on input line 574.
|
||||
Package pdftex.def Info: images//ebpf_arch.jpg used on input line 575.
|
||||
(pdftex.def) Requested size: 426.79134pt x 272.75464pt.
|
||||
[12 <./images//ebpf_arch.jpg>]
|
||||
Overfull \hbox (3.10062pt too wide) in paragraph at lines 601--618
|
||||
Overfull \hbox (3.10062pt too wide) in paragraph at lines 602--619
|
||||
[][]
|
||||
[]
|
||||
|
||||
[13]
|
||||
Overfull \hbox (17.02478pt too wide) in paragraph at lines 627--628
|
||||
Overfull \hbox (17.02478pt too wide) in paragraph at lines 628--629
|
||||
[]\T1/txr/m/n/12 Therefore, when us-ing JIT com-pil-ing (a set-ting de-fined by
|
||||
the vari-able \T1/txr/m/it/12 bpf_jit_enable\T1/txr/m/n/12 [[][]30[][]],
|
||||
[]
|
||||
|
||||
[14]
|
||||
Overfull \hbox (56.55217pt too wide) in paragraph at lines 678--689
|
||||
Overfull \hbox (56.55217pt too wide) in paragraph at lines 679--690
|
||||
[][]
|
||||
[]
|
||||
|
||||
|
||||
LaTeX Warning: Reference `table:ebpf_maps' on page 15 undefined on input line 6
|
||||
93.
|
||||
94.
|
||||
|
||||
|
||||
Overfull \hbox (11.26865pt too wide) in paragraph at lines 693--694
|
||||
Overfull \hbox (11.26865pt too wide) in paragraph at lines 694--695
|
||||
\T1/txr/m/n/12 de-vel-op-ment of our rootkit, we will mainly fo-cus on hash map
|
||||
s (BPF_MAP_TYPE_HASH),
|
||||
[]
|
||||
@@ -1284,67 +1284,67 @@ s (BPF_MAP_TYPE_HASH),
|
||||
[15]
|
||||
|
||||
LaTeX Warning: Reference `table:bpf_syscall' on page 16 undefined on input line
|
||||
703.
|
||||
704.
|
||||
|
||||
|
||||
Overfull \hbox (42.01218pt too wide) in paragraph at lines 706--722
|
||||
Overfull \hbox (42.01218pt too wide) in paragraph at lines 707--723
|
||||
[][]
|
||||
[]
|
||||
|
||||
[16]
|
||||
|
||||
LaTeX Warning: Reference `section:TODO' on page 17 undefined on input line 749.
|
||||
LaTeX Warning: Reference `section:TODO' on page 17 undefined on input line 750.
|
||||
|
||||
|
||||
|
||||
Overfull \hbox (13.5802pt too wide) in paragraph at lines 759--789
|
||||
Overfull \hbox (13.5802pt too wide) in paragraph at lines 760--790
|
||||
[][]
|
||||
[]
|
||||
|
||||
[17]
|
||||
<images//xdp_diag.jpg, id=768, 649.42625pt x 472.76625pt>
|
||||
<images//xdp_diag.jpg, id=774, 649.42625pt x 472.76625pt>
|
||||
File: images//xdp_diag.jpg Graphic file (type jpg)
|
||||
<use images//xdp_diag.jpg>
|
||||
Package pdftex.def Info: images//xdp_diag.jpg used on input line 805.
|
||||
Package pdftex.def Info: images//xdp_diag.jpg used on input line 806.
|
||||
(pdftex.def) Requested size: 426.79134pt x 310.69934pt.
|
||||
[18] [19 <./images//xdp_diag.jpg>]
|
||||
Overfull \hbox (5.80417pt too wide) in paragraph at lines 868--880
|
||||
Overfull \hbox (5.80417pt too wide) in paragraph at lines 869--881
|
||||
[][]
|
||||
[]
|
||||
|
||||
[20] [21] [22] [23]
|
||||
<images//libbpf_prog.jpg, id=827, 543.02875pt x 502.87875pt>
|
||||
<images//libbpf_prog.jpg, id=833, 543.02875pt x 502.87875pt>
|
||||
File: images//libbpf_prog.jpg Graphic file (type jpg)
|
||||
<use images//libbpf_prog.jpg>
|
||||
Package pdftex.def Info: images//libbpf_prog.jpg used on input line 978.
|
||||
Package pdftex.def Info: images//libbpf_prog.jpg used on input line 979.
|
||||
(pdftex.def) Requested size: 341.43306pt x 316.20142pt.
|
||||
[24]
|
||||
|
||||
LaTeX Warning: Reference `TODO' on page 25 undefined on input line 1006.
|
||||
LaTeX Warning: Reference `TODO' on page 25 undefined on input line 1007.
|
||||
|
||||
[25 <./images//libbpf_prog.jpg>] [26]
|
||||
Chapter 3.
|
||||
|
||||
Overfull \hbox (15.27466pt too wide) in paragraph at lines 1029--1057
|
||||
Overfull \hbox (15.27466pt too wide) in paragraph at lines 1030--1058
|
||||
[][]
|
||||
[]
|
||||
|
||||
[27
|
||||
|
||||
]
|
||||
Overfull \hbox (144.2746pt too wide) in paragraph at lines 1069--1070
|
||||
Overfull \hbox (144.2746pt too wide) in paragraph at lines 1070--1071
|
||||
[]\T1/txr/bx/n/12 Unprivileged users \T1/txr/m/n/12 can only load and at-tach e
|
||||
BPF pro-grams of type BPF_PROG_TYPE_SOCKET_FILTER[[][]53[][]],
|
||||
[]
|
||||
|
||||
[28]
|
||||
Overfull \hbox (33.33205pt too wide) in paragraph at lines 1095--1096
|
||||
Overfull \hbox (33.33205pt too wide) in paragraph at lines 1096--1097
|
||||
[]\T1/txr/m/n/12 Therefore, eBPF net-work pro-grams usu-ally re-quire both CAP_
|
||||
BPF and CAP_NET_ADMIN,
|
||||
[]
|
||||
|
||||
[29]
|
||||
Overfull \hbox (18.75664pt too wide) in paragraph at lines 1125--1126
|
||||
Overfull \hbox (18.75664pt too wide) in paragraph at lines 1126--1127
|
||||
\T1/txr/m/n/12 can also ex-plore all the avail-able maps in the sys-tem by us-i
|
||||
ng the BPF_MAP_GET_NEXT_ID
|
||||
[]
|
||||
@@ -1356,19 +1356,19 @@ File: lstlang1.sty 2020/03/24 1.8d listings language file
|
||||
File: lstmisc.sty 2020/03/24 1.8d (Carsten Heinz)
|
||||
)
|
||||
Package hyperref Info: bookmark level for unknown lstlisting defaults to 0 on i
|
||||
nput line 1141.
|
||||
nput line 1142.
|
||||
[30]
|
||||
LaTeX Font Info: Trying to load font information for T1+txtt on input line 1
|
||||
141.
|
||||
142.
|
||||
|
||||
(/usr/share/texlive/texmf-dist/tex/latex/txfonts/t1txtt.fd
|
||||
File: t1txtt.fd 2000/12/15 v3.1
|
||||
)
|
||||
LaTeX Font Info: Font shape `T1/txtt/b/n' in size <10> not available
|
||||
(Font) Font shape `T1/txtt/bx/n' tried instead on input line 1143.
|
||||
(Font) Font shape `T1/txtt/bx/n' tried instead on input line 1144.
|
||||
|
||||
[31] [32]
|
||||
Overfull \hbox (55.2727pt too wide) in paragraph at lines 1285--1286
|
||||
Overfull \hbox (55.2727pt too wide) in paragraph at lines 1286--1287
|
||||
\T1/txr/m/n/12 As we in-tro-duced in the pre-vi-ous sub-sec-tion, the bpf_probe
|
||||
_read_user() and bpf_probe_read_kernel()
|
||||
[]
|
||||
@@ -1376,253 +1376,283 @@ _read_user() and bpf_probe_read_kernel()
|
||||
[33]
|
||||
|
||||
LaTeX Warning: Reference `subsection_bpf_probe_write_apps' on page 34 undefined
|
||||
on input line 1289.
|
||||
on input line 1290.
|
||||
|
||||
|
||||
Overfull \hbox (47.97661pt too wide) in paragraph at lines 1294--1295
|
||||
Overfull \hbox (47.97661pt too wide) in paragraph at lines 1295--1296
|
||||
\T1/txr/m/n/12 helper. It will only work if the ker-nel was com-piled with the
|
||||
CON-FIG_BPF_KPROBE_OVERRIDE
|
||||
[]
|
||||
|
||||
[34]
|
||||
Overfull \hbox (62.0767pt too wide) in paragraph at lines 1336--1337
|
||||
Overfull \hbox (62.0767pt too wide) in paragraph at lines 1337--1338
|
||||
\T1/txr/m/n/12 the bounds of func-tion pa-ram-e-ters via the helpers bpf_probe_
|
||||
read_user() and bpf_probe_read_kernel().
|
||||
[]
|
||||
|
||||
[35]
|
||||
<images//mem_arch_pages.jpg, id=1010, 593.21625pt x 434.62375pt>
|
||||
<images//mem_arch_pages.jpg, id=1016, 593.21625pt x 434.62375pt>
|
||||
File: images//mem_arch_pages.jpg Graphic file (type jpg)
|
||||
<use images//mem_arch_pages.jpg>
|
||||
Package pdftex.def Info: images//mem_arch_pages.jpg used on input line 1349.
|
||||
Package pdftex.def Info: images//mem_arch_pages.jpg used on input line 1350.
|
||||
(pdftex.def) Requested size: 369.88582pt x 271.00914pt.
|
||||
[36]
|
||||
<images//mem_major_page_fault.jpg, id=1018, 639.38875pt x 425.59pt>
|
||||
<images//mem_major_page_fault.jpg, id=1024, 639.38875pt x 425.59pt>
|
||||
File: images//mem_major_page_fault.jpg Graphic file (type jpg)
|
||||
<use images//mem_major_page_fault.jpg>
|
||||
Package pdftex.def Info: images//mem_major_page_fault.jpg used on input line 1
|
||||
359.
|
||||
360.
|
||||
(pdftex.def) Requested size: 312.9803pt x 208.32661pt.
|
||||
[37 <./images//mem_arch_pages.jpg>]
|
||||
<images//mem_minor_page_fault.jpg, id=1025, 654.445pt x 555.07375pt>
|
||||
<images//mem_minor_page_fault.jpg, id=1031, 654.445pt x 555.07375pt>
|
||||
File: images//mem_minor_page_fault.jpg Graphic file (type jpg)
|
||||
<use images//mem_minor_page_fault.jpg>
|
||||
Package pdftex.def Info: images//mem_minor_page_fault.jpg used on input line 1
|
||||
367.
|
||||
368.
|
||||
(pdftex.def) Requested size: 312.9803pt x 265.45834pt.
|
||||
<images//memory.jpg, id=1026, 310.15875pt x 519.9425pt>
|
||||
<images//memory.jpg, id=1032, 310.15875pt x 569.12625pt>
|
||||
File: images//memory.jpg Graphic file (type jpg)
|
||||
<use images//memory.jpg>
|
||||
Package pdftex.def Info: images//memory.jpg used on input line 1378.
|
||||
(pdftex.def) Requested size: 170.71652pt x 286.18347pt.
|
||||
Package pdftex.def Info: images//memory.jpg used on input line 1379.
|
||||
(pdftex.def) Requested size: 170.71652pt x 313.25488pt.
|
||||
[38 <./images//mem_major_page_fault.jpg> <./images//mem_minor_page_fault.jpg>]
|
||||
[39 <./images//memory.jpg>]
|
||||
<images//stack_pres.jpg, id=1040, 707.64375pt x 283.0575pt>
|
||||
<images//stack_pres.jpg, id=1046, 707.64375pt x 283.0575pt>
|
||||
File: images//stack_pres.jpg Graphic file (type jpg)
|
||||
<use images//stack_pres.jpg>
|
||||
Package pdftex.def Info: images//stack_pres.jpg used on input line 1401.
|
||||
Package pdftex.def Info: images//stack_pres.jpg used on input line 1403.
|
||||
(pdftex.def) Requested size: 398.33858pt x 159.33606pt.
|
||||
|
||||
[40 <./images//stack_pres.jpg>]
|
||||
<images//stack_ops.jpg, id=1049, 524.96124pt x 694.595pt>
|
||||
<images//stack_ops.jpg, id=1055, 524.96124pt x 694.595pt>
|
||||
File: images//stack_ops.jpg Graphic file (type jpg)
|
||||
<use images//stack_ops.jpg>
|
||||
Package pdftex.def Info: images//stack_ops.jpg used on input line 1435.
|
||||
Package pdftex.def Info: images//stack_ops.jpg used on input line 1437.
|
||||
(pdftex.def) Requested size: 284.52756pt x 376.47473pt.
|
||||
<images//stack_before.jpg, id=1050, 712.6625pt x 315.1775pt>
|
||||
[41]
|
||||
<images//stack_before.jpg, id=1060, 712.6625pt x 315.1775pt>
|
||||
File: images//stack_before.jpg Graphic file (type jpg)
|
||||
<use images//stack_before.jpg>
|
||||
Package pdftex.def Info: images//stack_before.jpg used on input line 1446.
|
||||
Package pdftex.def Info: images//stack_before.jpg used on input line 1448.
|
||||
(pdftex.def) Requested size: 398.33858pt x 176.16635pt.
|
||||
[41 <./images//stack_ops.jpg>]
|
||||
<images//stack.jpg, id=1055, 707.64375pt x 381.425pt>
|
||||
<images//stack.jpg, id=1061, 707.64375pt x 381.425pt>
|
||||
File: images//stack.jpg Graphic file (type jpg)
|
||||
<use images//stack.jpg>
|
||||
Package pdftex.def Info: images//stack.jpg used on input line 1453.
|
||||
Package pdftex.def Info: images//stack.jpg used on input line 1455.
|
||||
(pdftex.def) Requested size: 398.33858pt x 214.70816pt.
|
||||
[42 <./images//stack_before.jpg> <./images//stack.jpg>] [43]
|
||||
Overfull \hbox (3.09538pt too wide) in paragraph at lines 1497--1498
|
||||
[42 <./images//stack_ops.jpg> <./images//stack_before.jpg>] [43 <./images//sta
|
||||
ck.jpg>] [44]
|
||||
Overfull \hbox (3.09538pt too wide) in paragraph at lines 1499--1500
|
||||
\T1/txr/m/n/12 trac-ing pro-grams can read any user mem-ory lo-ca-tion with the
|
||||
bpf_probe_read_user()
|
||||
[]
|
||||
|
||||
[44]
|
||||
<images//stack_scan_write_tech.jpg, id=1101, 829.0975pt x 315.1775pt>
|
||||
<images//stack_scan_write_tech.jpg, id=1100, 829.0975pt x 315.1775pt>
|
||||
File: images//stack_scan_write_tech.jpg Graphic file (type jpg)
|
||||
<use images//stack_scan_write_tech.jpg>
|
||||
Package pdftex.def Info: images//stack_scan_write_tech.jpg used on input line
|
||||
1513.
|
||||
1515.
|
||||
(pdftex.def) Requested size: 455.24408pt x 173.0548pt.
|
||||
|
||||
Overfull \hbox (28.45273pt too wide) in paragraph at lines 1513--1514
|
||||
Overfull \hbox (28.45273pt too wide) in paragraph at lines 1515--1516
|
||||
[][]
|
||||
[]
|
||||
|
||||
[45]
|
||||
|
||||
LaTeX Warning: Reference `TODO' on page 45 undefined on input line 1535.
|
||||
LaTeX Warning: Reference `TODO' on page 46 undefined on input line 1537.
|
||||
|
||||
[45 <./images//stack_scan_write_tech.jpg>] [46]
|
||||
<images//frame.jpg, id=1137, 695.59875pt x 705.63625pt>
|
||||
[46 <./images//stack_scan_write_tech.jpg>] [47]
|
||||
<images//frame.jpg, id=1147, 695.59875pt x 705.63625pt>
|
||||
File: images//frame.jpg Graphic file (type jpg)
|
||||
<use images//frame.jpg>
|
||||
Package pdftex.def Info: images//frame.jpg used on input line 1571.
|
||||
Package pdftex.def Info: images//frame.jpg used on input line 1573.
|
||||
(pdftex.def) Requested size: 398.33858pt x 404.07954pt.
|
||||
[47] [48 <./images//frame.jpg>]
|
||||
<images//tcp_conn.jpg, id=1156, 452.69125pt x 405.515pt>
|
||||
[48 <./images//frame.jpg>]
|
||||
[49]
|
||||
<images//tcp_conn.jpg, id=1167, 452.69125pt x 405.515pt>
|
||||
File: images//tcp_conn.jpg Graphic file (type jpg)
|
||||
<use images//tcp_conn.jpg>
|
||||
Package pdftex.def Info: images//tcp_conn.jpg used on input line 1619.
|
||||
Package pdftex.def Info: images//tcp_conn.jpg used on input line 1621.
|
||||
(pdftex.def) Requested size: 341.43306pt x 305.84947pt.
|
||||
[49]
|
||||
Overfull \hbox (30.78944pt too wide) in paragraph at lines 1624--1625
|
||||
|
||||
Overfull \hbox (30.78944pt too wide) in paragraph at lines 1626--1627
|
||||
[]\T1/txr/m/n/12 As we can ob-serve in the fig-ure, the hosts in-ter-change a s
|
||||
e-quence of <SYN>, <SYN+ACK>,
|
||||
[]
|
||||
|
||||
<images//tcp_retransmission.jpg, id=1164, 523.9575pt x 485.815pt>
|
||||
[50 <./images//tcp_conn.jpg>]
|
||||
<images//tcp_retransmission.jpg, id=1175, 523.9575pt x 485.815pt>
|
||||
File: images//tcp_retransmission.jpg Graphic file (type jpg)
|
||||
<use images//tcp_retransmission.jpg>
|
||||
Package pdftex.def Info: images//tcp_retransmission.jpg used on input line 163
|
||||
5.
|
||||
7.
|
||||
(pdftex.def) Requested size: 341.43306pt x 316.58401pt.
|
||||
[50 <./images//tcp_conn.jpg>] [51 <./images//tcp_retransmission.jpg>]
|
||||
<images//tcp_exfiltrate_retrans.jpg, id=1182, 633.36626pt x 475.7775pt>
|
||||
[51 <./images//tcp_retransmission.jpg>] [52]
|
||||
<images//tcp_exfiltrate_retrans.jpg, id=1192, 633.36626pt x 475.7775pt>
|
||||
File: images//tcp_exfiltrate_retrans.jpg Graphic file (type jpg)
|
||||
<use images//tcp_exfiltrate_retrans.jpg>
|
||||
Package pdftex.def Info: images//tcp_exfiltrate_retrans.jpg used on input line
|
||||
1672.
|
||||
1674.
|
||||
(pdftex.def) Requested size: 426.79134pt x 320.60597pt.
|
||||
[52]
|
||||
|
||||
[53 <./images//tcp_exfiltrate_retrans.jpg>] [54]
|
||||
Chapter 4.
|
||||
[55
|
||||
|
||||
] [56]
|
||||
]
|
||||
<images//stack_ret_hij_simple.jpg, id=1210, 774.895pt x 674.52pt>
|
||||
File: images//stack_ret_hij_simple.jpg Graphic file (type jpg)
|
||||
<use images//stack_ret_hij_simple.jpg>
|
||||
Package pdftex.def Info: images//stack_ret_hij_simple.jpg used on input line 1
|
||||
730.
|
||||
(pdftex.def) Requested size: 426.79134pt x 371.51205pt.
|
||||
[56] [57 <./images//stack_ret_hij_simple.jpg>]
|
||||
<images//buffer_overflow.jpg, id=1229, 707.64375pt x 343.2825pt>
|
||||
File: images//buffer_overflow.jpg Graphic file (type jpg)
|
||||
<use images//buffer_overflow.jpg>
|
||||
Package pdftex.def Info: images//buffer_overflow.jpg used on input line 1756.
|
||||
(pdftex.def) Requested size: 426.79134pt x 207.03964pt.
|
||||
<images//buffer_overflow_shellcode.jpg, id=1231, 707.64375pt x 379.4175pt>
|
||||
File: images//buffer_overflow_shellcode.jpg Graphic file (type jpg)
|
||||
<use images//buffer_overflow_shellcode.jpg>
|
||||
Package pdftex.def Info: images//buffer_overflow_shellcode.jpg used on input l
|
||||
ine 1767.
|
||||
(pdftex.def) Requested size: 426.79134pt x 228.8333pt.
|
||||
[58 <./images//buffer_overflow.jpg>]
|
||||
|
||||
LaTeX Warning: Reference `TODO probably an Annex' on page 59 undefined on input
|
||||
line 1772.
|
||||
|
||||
|
||||
LaTeX Warning: Reference `TODO' on page 59 undefined on input line 1782.
|
||||
|
||||
[59 <./images//buffer_overflow_shellcode.jpg>]
|
||||
Chapter 5.
|
||||
[57
|
||||
[60
|
||||
|
||||
]
|
||||
Chapter 6.
|
||||
[58
|
||||
[61
|
||||
|
||||
]
|
||||
Overfull \hbox (5.34976pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (5.34976pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txtt/m/n/12 threat -[] intelligence / cyber -[] year -[] in -[] retrospect
|
||||
/ yir -[] cyber -[] threats -[]
|
||||
[]
|
||||
|
||||
[59
|
||||
[62
|
||||
|
||||
|
||||
]
|
||||
Overfull \hbox (6.22696pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (6.22696pt too wide) in paragraph at lines 1817--1817
|
||||
[]\T1/txr/m/it/12 Bpf fea-tures by linux ker-nel ver-sion\T1/txr/m/n/12 , io-vi
|
||||
-sor. [On-line]. Avail-able: [][]$\T1/txtt/m/n/12 https : / / github .
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (7.34976pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (7.34976pt too wide) in paragraph at lines 1817--1817
|
||||
[][]$\T1/txtt/m/n/12 https : / / ebpf . io / what -[] is -[] ebpf / #loader -[]
|
||||
-[] verification -[] architecture$[][]\T1/txr/m/n/12 .
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (21.24973pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (21.24973pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txtt/m/n/12 vger . kernel . org / netconf2015Starovoitov -[] bpf _ collabsu
|
||||
mmit _ 2015feb20 .
|
||||
[]
|
||||
|
||||
[60]
|
||||
Overfull \hbox (9.14975pt too wide) in paragraph at lines 1752--1752
|
||||
[63]
|
||||
Overfull \hbox (9.14975pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txtt/m/n/12 ch02 . xhtml# :-[]: text = With % 20JIT % 20compiled % 20code %
|
||||
2C % 20i ,[] %20other %
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (6.49615pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (6.49615pt too wide) in paragraph at lines 1817--1817
|
||||
[]\T1/txr/m/n/12 D. Lavie. ^^P A gen-tle in-tro-duc-tion to xdp.^^Q (Feb. 3, 2
|
||||
022), [On-line]. Avail-able: [][]$\T1/txtt/m/n/12 https :
|
||||
[]
|
||||
|
||||
[61]
|
||||
Overfull \hbox (0.76683pt too wide) in paragraph at lines 1752--1752
|
||||
[64]
|
||||
Overfull \hbox (0.76683pt too wide) in paragraph at lines 1817--1817
|
||||
[]\T1/txr/m/n/12 ^^P Bpf next ker-nel tree.^^Q (), [On-line]. Avail-able: [][]
|
||||
$\T1/txtt/m/n/12 https : / / kernel . googlesource .
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (14.49278pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (14.49278pt too wide) in paragraph at lines 1817--1817
|
||||
[]\T1/txr/m/it/12 Capabilities - overview of linux ca-pa-bil-i-ties\T1/txr/m/n/
|
||||
12 . [On-line]. Avail-able: [][]$\T1/txtt/m/n/12 http : / / manpages .
|
||||
[]
|
||||
|
||||
[62]
|
||||
Overfull \hbox (53.32059pt too wide) in paragraph at lines 1752--1752
|
||||
[65]
|
||||
Overfull \hbox (53.32059pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txr/m/it/12 sup-ple-ment\T1/txr/m/n/12 , Jan. 28, 2018, p. 148. [On-line].
|
||||
Avail-able: [][]$\T1/txtt/m/n/12 https : / / raw . githubusercontent .
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (33.3497pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (33.3497pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txtt/m/n/12 20CON % 2029 % 20presentations / Guillaume % 20Fournier % 20Syl
|
||||
vain % 20Afchain %
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (9.33742pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (9.33742pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txr/m/n/12 Avail-able: [][]$\T1/txtt/m/n/12 https : / / events19 . linuxfou
|
||||
ndation . org / wp -[] content / uploads /
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (18.44974pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (18.44974pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txtt/m/n/12 2017 / 12 / MM -[] 101 -[] Introduction -[] to -[] Linux -[] Me
|
||||
mory -[] Management -[] Christoph -[]
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (5.92503pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (5.92503pt too wide) in paragraph at lines 1817--1817
|
||||
[]\T1/txr/m/n/12 D. Breaker. ^^P Un-der-stand-ing page faults and mem-ory swap
|
||||
-in/outs.^^Q (Aug. 19, 2019),
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (40.56133pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (40.56133pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txr/m/n/12 able: [][]$\T1/txtt/m/n/12 https : / / h3xduck . github . io / e
|
||||
xploit / 2021 / 05 / 23 / stackbufferoverflow -[]
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (47.32059pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (47.32059pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txr/m/it/12 sup-ple-ment\T1/txr/m/n/12 , Jan. 28, 2018, p. 18. [On-line]. A
|
||||
vail-able: [][]$\T1/txtt/m/n/12 https : / / raw . githubusercontent .
|
||||
[]
|
||||
|
||||
[63]
|
||||
Overfull \hbox (11.10025pt too wide) in paragraph at lines 1752--1752
|
||||
[66]
|
||||
Overfull \hbox (11.10025pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txr/m/n/12 DE-F-CON 27, pp. 69^^U74. [On-line]. Avail-able: [][]$\T1/txtt/m
|
||||
/n/12 https : / / raw . githubusercontent .
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (39.98859pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (39.98859pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txr/m/it/12 ment\T1/txr/m/n/12 , Jan. 28, 2018, pp. 19^^U22. [On-line]. Ava
|
||||
il-able: [][]$\T1/txtt/m/n/12 https : / / raw . githubusercontent .
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (21.2149pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (21.2149pt too wide) in paragraph at lines 1817--1817
|
||||
\T1/txr/m/n/12 line]. Avail-able: [][]$\T1/txtt/m/n/12 https : / / www . plixer
|
||||
. com / blog / network -[] layers -[] explained/$[][]\T1/txr/m/n/12 .
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (4.29944pt too wide) in paragraph at lines 1752--1752
|
||||
Overfull \hbox (4.29944pt too wide) in paragraph at lines 1817--1817
|
||||
[]\T1/txr/m/n/12 ^^P Trans-mis-sion con-trol pro-to-col,^^Q IBM. (Apr. 19, 202
|
||||
2), [On-line]. Avail-able: [][]$\T1/txtt/m/n/12 https :
|
||||
[]
|
||||
|
||||
[64] (/usr/share/texlive/texmf-dist/tex/latex/listings/lstlang1.sty
|
||||
[67] (/usr/share/texlive/texmf-dist/tex/latex/listings/lstlang1.sty
|
||||
File: lstlang1.sty 2020/03/24 1.8d listings language file
|
||||
)
|
||||
(/usr/share/texlive/texmf-dist/tex/latex/listings/lstlang1.sty
|
||||
@@ -1633,24 +1663,30 @@ File: lstlang1.sty 2020/03/24 1.8d listings language file
|
||||
been already used, duplicate ignored
|
||||
<to be read again>
|
||||
\relax
|
||||
l.1812 \end{document}
|
||||
l.1877 \end{document}
|
||||
[2
|
||||
|
||||
] (./document.aux)
|
||||
|
||||
LaTeX Warning: There were undefined references.
|
||||
|
||||
Package rerunfilecheck Info: File `document.out' has not changed.
|
||||
(rerunfilecheck) Checksum: 0534197E5E0256674903E8AAF25F54B0;4578.
|
||||
|
||||
Package rerunfilecheck Warning: File `document.out' has changed.
|
||||
(rerunfilecheck) Rerun to get outlines right
|
||||
(rerunfilecheck) or use package `bookmark'.
|
||||
|
||||
Package rerunfilecheck Info: Checksums for `document.out':
|
||||
(rerunfilecheck) Before: 5294F3D5A17A6EC3C46845D3EEAB2EF6;4593
|
||||
(rerunfilecheck) After: 7F97C08A6EE704EC164C376D592ADDCD;4579.
|
||||
Package logreq Info: Writing requests to 'document.run.xml'.
|
||||
\openout1 = `document.run.xml'.
|
||||
|
||||
)
|
||||
Here is how much of TeX's memory you used:
|
||||
28520 strings out of 481209
|
||||
454854 string characters out of 5914747
|
||||
1353349 words of memory out of 5000000
|
||||
44638 multiletter control sequences out of 15000+600000
|
||||
28578 strings out of 481209
|
||||
455998 string characters out of 5914747
|
||||
1354008 words of memory out of 5000000
|
||||
44676 multiletter control sequences out of 15000+600000
|
||||
459242 words of font info for 106 fonts, out of 8000000 for 9000
|
||||
36 hyphenation exceptions out of 8191
|
||||
88i,12n,90p,1029b,3693s stack positions out of 5000i,500n,10000p,200000b,80000s
|
||||
@@ -1666,9 +1702,9 @@ e/texmf-dist/fonts/type1/urw/helvetic/uhvb8a.pfb></usr/share/texlive/texmf-dist
|
||||
/urw/helvetic/uhvr8a.pfb></usr/share/texlive/texmf-dist/fonts/type1/urw/times/u
|
||||
tmb8a.pfb></usr/share/texlive/texmf-dist/fonts/type1/urw/times/utmr8a.pfb></usr
|
||||
/share/texlive/texmf-dist/fonts/type1/urw/times/utmri8a.pfb>
|
||||
Output written on document.pdf (83 pages, 1445236 bytes).
|
||||
Output written on document.pdf (86 pages, 1639730 bytes).
|
||||
PDF statistics:
|
||||
1548 PDF objects out of 1728 (max. 8388607)
|
||||
372 named destinations out of 1000 (max. 500000)
|
||||
605 words of extra memory for PDF output out of 10000 (max. 10000000)
|
||||
1592 PDF objects out of 1728 (max. 8388607)
|
||||
389 named destinations out of 1000 (max. 500000)
|
||||
620 words of extra memory for PDF output out of 10000 (max. 10000000)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user