From 7f2b60a622dc8dc000155bc8be069787fd47a38f Mon Sep 17 00:00:00 2001 From: twoneis Date: Fri, 7 Mar 2025 11:13:55 +0100 Subject: [PATCH] post meeting notes --- meetings.md | 19 +++++++++++++++---- 1 file changed, 15 insertions(+), 4 deletions(-) diff --git a/meetings.md b/meetings.md index 1e7f9ed2d..4995f3bb1 100644 --- a/meetings.md +++ b/meetings.md @@ -1,3 +1,14 @@ +# 03-07 +Goal: Breaking KASLR through TLB-based side channel attack +Status: Proposal draft and setting up machine +Progress: + - Messed up the machine configuration a bit and wasted time there (thanks Aleksandar for helping me out) + - glanced over need for google kernelCTF kernel + TODO: check if module rwx can be used because that would be much easier and commonly enabled + - messed up some things in grub -> using VM now because that caused long recovery times (had to sync up with aleksandar) + - Wrote proposal draft +Stuck on: Not really stuck but getting the kernel and options right is taking more time than expected. + # 02-28 Daily supervisor: Dyon Goal: Breaking KASLR through TLB-based side channel attack @@ -8,7 +19,7 @@ Progress: - but: maybe further input needed here which one is desireable target - strict module rwx => can leak heap (excluding cred and less reliable pipe-buffer) and page tables - virtual heap => can leak heap (including cred) reliably - - Go with heap => cred one of the most interesting + TODO: Go with heap => cred one of the most interesting - virtual stack => can leak kernel stack - Forgot about research proposal, message herbert @@ -19,7 +30,7 @@ Status: Progress: - Contacted Aleksandar for VM access - Learned more about prefetch sidechannel - - Only read TLB part not cache + TODO: Only read TLB part not cache # 02-14 Daily supervisor: idk yet? Dyon @@ -28,5 +39,5 @@ Status: Just started middle of this week Progress: - Skimmed paper and read some important parts more in depth - Intel CPU required (?) - - contact for hardware: Marković, A. (Aleksandar) - - probably VM enough? check that + TODO: contact for hardware: Marković, A. (Aleksandar) + TODO: probably VM enough? check that