发新话题
打印

[转载]测试Linux内核安全性的工具

[转载]测试Linux内核安全性的工具

1. http://www.grsecurity.net/

2. libsafe

3. PaX is a Linux kernel patch which protects against a number of overflow
attacks (but not all overflow attacks). PaXtest is a tool which tests
the
protection provided by PaX. It is a regression test suite that tries
to do
all kinds of dirtry tricks and then reports what worked and what did
not.
Anything that PaXtest can do, an attacker can do too.

PaXtest can be used to test other kernel patches as well (such as the
OpenWall patch, exec-shield and OpenBSD).

Adamantix users can simply install paxtest using apt-get. Users of
other
distributions can download it here and compile it for their
distribution.
PaXtest v0.9.6 features a so called kiddie and a blackhat mode. The
kiddie
mode simulates a not so clever script kiddie. It tries to use
conventional
methods to test the security. The blackhat mode however simulates a
more
clever attacker. It tries to do clever tricks to get around the kernel
protection.
4. Bastille Linux

但是...ayazero前辈有帖:
标题写错了,不是测试工具,也并非都是kernel related
曾几何时,有人对我说:装B遭雷劈。我说:去你妈的。于是,这个人又对我说:如果再说脏话,上帝会惩罚你的。我说:我操上帝。结论:彪悍的人生不需要上帝。

TOP

发新话题