How korneevscp/bypass-kernel-memoire-test works
X01 is a small Linux low-level learning project, not a production security tool. Its standalone programs demonstrate direct execve system calls, executable-memory shellcode execution, and kernel-symbol lookup. The README describes all three as run individually; excerpts show their internal behavior but not a shared orchestrator. Relationships below are limited to calls and operating-system interfaces visible in the excerpts.
Main entry points: X01_shellcode_bash.c Shellcode runner · X01_exec_bash.c Direct execve · X01_kernel_adresses.c Symbol search
Components 8
Direct syscall demo
- Direct execve
X01_exec_bash.c
Memory execution demo
- Shellcode runner
X01_shellcode_bash.c
Kernel symbol lookup
- Symbol search
X01_kernel_adresses.c
Other components
- Lab user
- Linux /bin/bash
- Executable memory
- /proc/kallsyms
- Linux kernel
Connections 9
- Lab user → Direct execve: runs separately
README.md - Direct execve → Linux kernel: invokes syscall
X01_exec_bash.c - Linux kernel → Linux /bin/bash: replaces process
- Lab user → Shellcode runner: runs separately
README.md - Shellcode runner → Executable memory: maps and executes
X01_shellcode_bash.c - Shellcode runner → Linux kernel: shellcode syscall
X01_shellcode_bash.c - Linux kernel → Linux /bin/bash: replaces process
README.md - Lab user → Symbol search: runs separately
README.md - Symbol search → /proc/kallsyms: reads and searches
X01_kernel_adresses.c