Skip to content

vivi365/trustingtrust-go

Repository files navigation

Trusting Trust

FEP3370 Ethical Hacking @KTH - Demo

Exploit in a Go compiler compiles benign Go code into malicious code.

Patching to Go compiler sources (malicious.patch) reused and adapted from yrjan.

Usage

Pull image from registry:

docker pull vinterstorm/trustingtrust-demo-go

Run container, executing main exploit script (/exploit/demo_exploit.sh):

docker run -it --rm vinterstorm/trustingtrust-demo-go

Additionally, run the installation of malicious compiler again with:

docker run -it --rm vinterstorm/trustingtrust-demo-go /exploit/install_malicious_go_compiler.sh

Or build from source and run:

docker build -t trustingtrust-demo-go .

docker run -it --rm trustingtrust-demo-go

About

demo of backdoored go compiler

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published