sudo pacman -S gdb
sudo pacman -S pwndbg
echo 'source /usr/share/pwndbg/gdbinit.py' >> ~/.gdbinitIf you are getting the following error "Cannot find Pwndbg virtualenv directory: /usr/share/pwndbg/.venv: please re-run setup.sh", do the following steps, otherwise ignore:
| use futures_io::{AsyncRead, AsyncWrite}; | |
| use std::fmt; | |
| use std::io; | |
| use std::pin::Pin; | |
| use std::task::{Context, Poll}; | |
| use tokio::io::AsyncRead as TokioAsyncRead; | |
| use tokio::io::AsyncWrite as TokioAsyncWrite; | |
| pub trait Stream: AsyncRead + AsyncWrite + Unpin + Send + 'static {} |
This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.
Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.
You will find most of this information pulled from the Arch Wiki and other resources linked thereof.
Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.
| simple-rop: simple-rop.c | |
| gcc -m32 -O0 -g -static -fno-stack-protector $^ -o $@ | |
| .PHONY: clean | |
| clean: | |
| rm -rf simple-rop |
| - install the two shellscripts into the appropriate places under /etc/initramfs-tools | |
| - run update-initramfs | |
| - put "overlay=yes" on the kernel command line | |
| - reboot | |
| With the overlay in place, the real root is mounted readonly on /ro. | |
| Only the root fs is changed, other filesystems are mounted normally. | |
| Remove "overlay=yes" (or change it to something other than yes) and reboot to go back to readwrite. | |
| (This probably means that you want the commandline config to live somewhere other than on the root fs, e.g. under /boot) |
