h3xduck
|
745ec4e395
|
Updated project structure, and added new list for the next incoming feature.
|
2021-12-21 20:08:49 -05:00 |
|
Marcos S. Bajo
|
1b2bc34826
|
Fix typo
|
2021-11-28 02:01:56 +01:00 |
|
Marcos S. Bajo
|
c1939dca2b
|
Update README.md
|
2021-11-28 02:01:32 +01:00 |
|
Marcos S. Bajo
|
3b2fbc3aa4
|
Merge pull request #9 from h3xduck/playzone
First eBPF codebase, W+R access to incoming traffic and included PoC
|
2021-11-28 01:53:03 +01:00 |
|
h3xduck
|
2999a090b7
|
Fixed the client, now the payload shrinking is fully working, also the bug previously found seems to be nothing but an error of mine. Ready to merge!
|
2021-11-27 19:08:38 -05:00 |
|
h3xduck
|
a1119894cd
|
Made it work with an arbitrary length payload. Generalization with constants.h, now the PoC can be used for any shrinking/enlarging value. Discovered a very curious bug
|
2021-11-27 17:01:10 -05:00 |
|
h3xduck
|
a440326653
|
Arbitrary payload modification fully works now. Absolutely ridicous the time it took me (2 days) to realize I was computing the ip checksum with the old checksum values, which made it not to work. Finally can keep going
|
2021-11-27 14:10:43 -05:00 |
|
h3xduck
|
ca23880fd4
|
Arbitrary payload expansion is now working. IP checksum recomputation needs a revision, it is always 0...
|
2021-11-25 20:30:15 -05:00 |
|
h3xduck
|
253c302695
|
Payload increased length now being correctly recognized, but still cannot write to it yet.
|
2021-11-25 06:36:32 -05:00 |
|
h3xduck
|
442f955cf5
|
Added module which arbitrarily increases the size of the packet we received. Needs some tweaking to allow for modification of the header and payload fields yet, but the space allocation is already there. Also, multiple improvements overall
|
2021-11-24 20:41:07 -05:00 |
|
h3xduck
|
74cc7ff9e5
|
Further refactored code and dealt with the verifier issues with string comparisons
|
2021-11-24 12:17:31 -05:00 |
|
h3xduck
|
0568d5192d
|
Finished externalizing helper functions
|
2021-11-24 10:50:30 -05:00 |
|
h3xduck
|
72fddcac62
|
Finished adapting the code to tcp packets (+ researched a lot about xdp and ebpf, we should be OK with xdps, found a lot of ideas)
|
2021-11-23 19:55:44 -05:00 |
|
h3xduck
|
516e98748c
|
Finished adapting the client. Cleaned the user code and added getopt. The filter fully works now. Next step: return data to userspace via a map.
|
2021-11-22 20:02:47 -05:00 |
|
h3xduck
|
b04200526c
|
Finished xdp ebpf program, successfully showing packets received. Added client from Umbra, it will be the C&C client
|
2021-11-22 18:58:58 -05:00 |
|
h3xduck
|
23c7331d16
|
Continued working on first xdp filter, todo make bpf ring buffer work, check udp filter is up ans working
|
2021-11-21 20:00:43 -05:00 |
|
h3xduck
|
53da2d141d
|
Setup development environment with libbpf
|
2021-11-20 21:07:23 -05:00 |
|
MARCOS SANCHEZ BAJO
|
8e7fd92dc4
|
Added new folders
|
2021-11-10 14:02:36 +01:00 |
|
MARCOS SANCHEZ BAJO
|
67ad3d7290
|
Completed the matrix
|
2021-11-10 11:03:36 +01:00 |
|
MARCOS SANCHEZ BAJO
|
9b3e332bd8
|
Uploaded mitre att&ck diagram with some ideas
|
2021-11-06 14:49:42 +01:00 |
|
MARCOS SANCHEZ BAJO
|
89c267abcb
|
Included uc3m template
|
2021-10-27 22:29:57 +02:00 |
|
Marcos S. Bajo
|
8a8ec9ca8e
|
Initial commit
|
2021-10-27 19:47:58 +02:00 |
|