Expand description
KASLR offset detection for Linux kernels.
Scans physical memory for the "Linux version " banner string.
The banner’s physical address, combined with the known virtual address
of linux_banner from the symbol table, yields the KASLR slide.
Functions§
- adjust_
address - Apply a KASLR offset to a symbol address.
- detect_
kaslr_ offset - Detect the KASLR offset by scanning for the Linux banner string.