> comparably wizard-like manner, with Kernel hacker Al Viro involved: https://yarchive.net/comp/linux/extreme_system_recovery.html https://yarchive.net/comp/lin

> comparably wizard-like manner, with Kernel hacker Al Viro involved: https://yarchive.net/comp/linux/extreme_system_recovery.html https://yarchive.net/comp/linux/extreme_system_recovery.html If I were him, the best I could imagine was doing documentation reading and ASM writing on a separate computer with working toolchains, testing it, and finally entering some machine code in hex to the broken machine by hand. But he literally wrote an ASM program and constructed an ELF on a totally broken machine itself on the fly, with no documentation, no toolchain. Absolutely wizard. For example, it was how the syscall number was found without grep... > The next step was getting the syscall numbers. grep? We don't need no stinkin' grep. # while read i; do case $i in *__NR_link*) echo $i;; esac; done </usr/include/asm/unistd.h #define __NR_link 9 # while read i; do case $i in *__NR_exit*) echo $i;; esac; done </usr/include/asm/unistd.h #define __NR_exit 1 #define __NR__exit __NR_exit