Exploring Multi-Version Iptables Bypass in the Linux Kernel (Part Two)
Continuing from the previous article. In the last article, we pointed out the simplest bypass method, NF_STOP, but unfortunately, while NF_STOP was still usable in version 4.9.337, it was removed in 4.10-rc1. Therefore, our current requirement is to find a Gadget that can be utilized after 4.10-rc1. Here we introduce nf_hook_slow nf_hook_slow is the core … Read more