Full Disclosure mailing list archives
Re: Getting root, the hard way
From: andrew wiggin <end3er () gmail com>
Date: Thu, 6 Jan 2011 13:37:02 +0100
you should try with this one instead, it is more stable: /* * Linux Kernel SUID_PERM to root exploit * * Usage: * gcc -w suid-to-root.c -o suid-to-root * sudo chown root.root suid-to-root * sudo chmod +s suid-to-root * ./suid-to-root * * This exploit is NOT stable: * It does not work when you don't have sudo for example * But you can easily port it with "su -c" !!! * */ #include <stdlib.h> const char* args[] = {"/bin/sh", "-i", NULL}; int main() { setuid(0); execve("/bin/sh", args, NULL); } On 1/5/11, Григорий Братислава <musntlive () gmail com> wrote:
* Usage: * gcc -w caps-to-root.c -o caps-to-root * sudo setcap cap_sys_admin+ep caps-to-root * ./caps-to-rootIs further you fail because why see above:* sudo setcap cap_sys_admin+ep caps-to-rootIs I had sudo for why I has to run this code when I can sudo su. Is you must change advisory to "это пиздец!! Lame Race Condition for You Is Already Has Root" _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Getting root, the hard way Dan Rosenberg (Jan 05)
- Re: Getting root, the hard way Григорий Братислава (Jan 05)
- Re: Getting root, the hard way srl (Jan 06)
- Re: Getting root, the hard way Григорий Братислава (Jan 05)
- Re: Getting root, the hard way andrew wiggin (Jan 06)
- Re: Getting root, the hard way news (Jan 06)
- Re: Getting root, the hard way andrew wiggin (Jan 06)
- <Possible follow-ups>
- Re: Getting root, the hard way shawn Davison (Jan 06)
- Re: Getting root, the hard way Григорий Братислава (Jan 05)