search

niklasb / libc-database

Build a database of libc offsets to simplify exploitation
https://libc.rip/
MIT License
1.71k stars 192 forks source link

Add monitoring of others OS #24

Closed ajabep closed 4 years ago

ajabep commented 4 years ago

Add :

Requirements:

niklasb commented 4 years ago

please rebase on top of #23

ajabep commented 4 years ago

please rebase on top of #23

Better like that :)

ajabep commented 4 years ago

Hi,

I think that I haven't well understood the idea of this project: actually, your script was already incremental ;-). Thus, I thought it was made to update db.

Btw, I understand your judicious ideas about opt-in and opt-out. However, I'm not sure I understand why should ./get pull only ubuntu and debian? Is it to limit the time taken by a "simple" ./get? Is it for legacy? Moreover should not it display the list of available distros or download all distros?

I begin coding your idea: it will be simple to change later :)

maybe it's time to set up a cloud service for this :)

Can I contact you on twitter? I got some ideas, and I'm sure discussing it can be interesting 😏 However, I'm not sure this PR is the right place for that.

niklasb commented 4 years ago

On Tue 18. Aug 2020 at 19:04, Ajabep notifications@github.com wrote:

Hi,

I think that I haven't well understood the idea of this project: actually, your script was already incremental ;-). Thus, I thought it was made to update db.

Yes I am aware and I am happy that you continued to support that scenario well

Btw, I understand your judicious ideas about opt-in and opt-out. However, I'm not sure I understand why should ./get pull only ubuntu and debian? Is it to limit the time taken by a "simple" ./get? Is it for legacy? Moreover should not it display the list of available distros or download all distros?

Yes, it takes a long time to pull “just” Ubuntu and almost as long again to pull everything else. Initially it was viable to start it and have it finished in a couple of minutes but that is no longer the case and I fear that this might make it not as useful to a lot of people who don’t have a DB already prepared.

I begin coding your idea: it will be simple to change later :)

maybe it's time to set up a cloud service for this :)

Can I contact you on twitter? I got some ideas, and I'm sure discussing it can be interesting 😏

Sure no problem!

However, I'm not sure this PR is the right place for that.

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/niklasb/libc-database/pull/24#issuecomment-675600320, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAAXEY44YTRU53ZRMZNC4GLSBKYCTANCNFSM4QAIBI5A .

ajabep commented 4 years ago

(I stop here, will continue soon, but I have not finished. No need to review for now ;-) ) Moreover, I forgot to say: the bug on the script ./identify on Ubuntu was introduced in #22, and will be fixed with #26 :)

niklasb commented 4 years ago

Moreover should not it display the list of available distros or download all distros?

yes I like this idea: if ./get is called without arguments, it could print a list of possible download categories like

$ ./get
Please specify libc categories to download:
  * ubuntu
  * debian
  * rpm
  * centos
  * arch
  ...

You may also specify "all" to download all categories available.

Example:

$ ./get ubuntu rpm arch
$ ./get all

But I would be fine to instead have ./get download a default set of ubuntu/debian, like it did before, and use the README to document how to download the full set

ajabep commented 4 years ago

apt-get command works perfectly on a debian 10 slim, and should works for any debian-based OS :ok_hand: