Skip to content

Aarch64 port#62

Open
Zi1chs wants to merge 3 commits into
V4bel:masterfrom
Zi1chs:aarch64-port
Open

Aarch64 port#62
Zi1chs wants to merge 3 commits into
V4bel:masterfrom
Zi1chs:aarch64-port

Conversation

@Zi1chs

@Zi1chs Zi1chs commented May 12, 2026

Copy link
Copy Markdown

No description provided.

Zi1chs and others added 3 commits May 12, 2026 11:20
- Replace x86_64 shellcode/ELF in shell_elf[] with aarch64 equivalent
  (e_machine=0xb7, MOVZ/SVC instructions, syscall numbers 144/146/159/221).
- Update verify_byte() check at post-write to look for the aarch64 MOVZ
  opcode signature (0x80 0xd2) instead of the x86 (0x31 0xff).
- Update su_marker[] to match the first 8 bytes of the aarch64 shellcode.

Tested on Kali aarch64 6.19.11+kali-arm64; xfrm-ESP leg lands cleanly.
rxrpc leg is x86-only (oopses on aarch64 in flush_dcache_page).
- Replace x86_64 shellcode/ELF in shell_elf[] with aarch64 equivalent
  (e_machine=0xb7, MOVZ/SVC instructions, syscall numbers 144/146/159/221).
- Update verify_byte() check at post-write to look for the aarch64 MOVZ
  opcode signature (0x80 0xd2) instead of the x86 (0x31 0xff).
- Update su_marker[] to match the first 8 bytes of the aarch64 shellcode.

Tested on Kali aarch64 6.19.11+kali-arm64; xfrm-ESP leg lands cleanly.
rxrpc leg is x86-only (oopses on aarch64 in flush_dcache_page).
Updated cloning instructions for dirtyfrag repositories.
@keithlinneman

keithlinneman commented May 12, 2026

Copy link
Copy Markdown

Regarding your limitation on AppArmor restricting namespace creation - check if you have sysctl setting apparmor_restrict_unprivileged_unconfined=0. If so, try:

aa-exec -p runc -- ./exp --force-esp

If you have apparmor_restrict_unprivileged_unconfined=1 it will not work, then you just need another aa-exec:

aa-exec -p runc -- aa-exec -p runc -- ./exp --force-esp

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants