Skip to content

Commit 711bdd1

Browse files
authored
Update readme.md
1 parent 5cbe5c0 commit 711bdd1

File tree

1 file changed

+6
-8
lines changed

1 file changed

+6
-8
lines changed

readme.md

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,25 +1,23 @@
11
# tiny webserver rce exploit
22

3-
This repository includes a simplified fork of the tiny http webserver
4-
https://github.com/shenfeng/tiny-web-server
5-
known to have a buffer overflow.
3+
This is a collection of exploits for a simplified fork of the tiny http webserver https://github.com/shenfeng/tiny-web-server , known to have a buffer overflow.
4+
5+
The goal is to showcase the evolution of memory safety mitigations and exploitation techniques over the years,
6+
in a semi-realistic environment.
67

78
The webserver has been compiled four times, with increasing levels of memory protections.
8-
For every version, an exploit that defeats the mitigations and launches a remote shell has been written.
9+
For every version, I've written an exploit that defeats the mitigations and launches a remote shell:
910

1011
- [tiny.1996](https://github.com/robalb/tiny-webserver-rce-exploit/blob/master/expl_1996.py) : no protections. Compiled statically, with an executable stack and no canaries like it's 1996
1112
- tiny.canary: executable stack, but with stack canaries enabled
1213
- tiny.nx: both canary and nx protection active
1314
- tiny.all: all protections active: canary, nx, ASLR, relro
1415

1516
All these binaries have Indirect Branch Tracking enabled, but are expected to run on
16-
an intel cpu preceding the ~2020 Tiger Lake line, wich is the first one supporting this security feature
17+
an intel cpu preceding the ~2020 Tiger Lake line, where this security feature is not yet supported
1718

1819
## rationale
1920

20-
This projects aims at showcasing the evolution of memory safety mitigations and exploitation techniques over the years,
21-
in a semi-realistic environment
22-
2321
There is a treasure trove of small webservers written in c that can be found
2422
on github.
2523
They are usually just learning exercises, not intended to run in production,

0 commit comments

Comments
 (0)