sudo docker build -t sconericles:latest .
sudo docker run -it --rm --device /dev/isgx --privileged --network=host sconericles:latest /bin/bash
First select a process to do the memory dump. Let's use fib.c as an example.
gcc fib.c -o fib
SCONE_ALPINE=1 SCONE_VERSION=1 SCONE_MODE=sim ./fib.c [a large number] > /dev/null &
SCONE_ALPINE=1 SCONE_VERSION=1 SCONE_MODE=hw ./fib.c [a large number] > /dev/null &
SPID=$(ps -a | grep -v grep | grep [process name] | awk '{print $1}')
Using the dumpstack.py script and the PID of the process, run:
python dumpstack.py $SPID | strings -n [min-size] | grep [secret]
Using the memdump.py script and the PID of the process, run:
python3 memdump.py $SPID > fib.dump
python3 flask-api.py
curl -X POST -H "Content-Type: application/json" \
-d '{"test":"ThisIsASecret"}' \
http://localhost:5000
In the cast-sh directory, run:
python3 -m cast
See more about cast-sh here