CVE-2016-5195

dirtycow 此漏洞利用以 dirtycow 漏洞的 pokemon 利用方法为基础，并自动生成新的 passwd 行。 运行该二进制文件时，系统会提示用户输入新密码。 原始 /etc/passwd 文件随后会被备份到 /tmp/passwd.bak，并用生成的行覆盖 root 账户。 运行此漏洞利用后，您应该可以使用新创建的用户登录。 要使用此漏洞利用，请根据您的需要修改用户值。 默认创建的用户是 firefart。 原始漏洞利用（dirtycow 的 ptracepokedata“pokemon”方法）：...

dirtycow

dirtycow 此利用程序以 dirtycow 漏洞的 pokemon 利用为基础，自动生成一个新的 passwd 行。 运行二进制文件时，会提示用户输入新密码。 原始 /etc/passwd 文件会被备份到 /tmp/passwd.bak，并用生成的行覆盖 root 账户。 运行利用程序后，您应该可以使用新创建的用户登录。 要使用此利用程序，请根据您的需求修改用户值。 默认创建的用户是 toor。 原始利用程序（dirtycow 的 ptracepokedata "pokemon" 方法）：...

dirtycow

✅ 要求 / 受影响的内核版本 Dirty COW 是 Linux 内核中一种已知的 本地权限提升 LPE 漏洞，编号为 CVE-2016-5195 。 :contentReferenceoaicite:0index=0 🎯 受影响的内核 一般来说，Dirty COW 影响 Linux 内核 2.x 到 4.x 且低于 4.8.3 的版本。 :contentReferenceoaicite:1index=1 一些发行版已反向移植补丁，因此内核版本看起来“旧”，但可能已经安全。 ✅ 修复版本（上游） Dirty COW 已在以下内核版本（及更新版本）中修复： 4.8.3 4.7.9...

Linux Kernel 2.6.22 < 3.9 - Dirty COW PTRACE_POKEDATA Race Condition Privilege Escalation (/etc/p

Exploit for linux platform in category local exploits // EDB-Note: After getting a shell, doing "echo 0 /proc/sys/vm/dirtywritebackcentisecs" may make the system more stable. // // This exploit uses the pokemon exploit of the dirtycow vulnerability // as a base and automatically generates a new...

Linux Kernel 2.6.22 < 3.9 - Dirty COW PTRACE_POKEDATA Race Condition PoC (Write Access) Exploit

Exploit for linux platform in category local exploits // $ echo pikachu|sudo tee pokeball;ls -l pokeball;gcc -pthread pokemon.c -o d;./d pokeball miltank;cat pokeball include //// pikachu include //// -rw-r--r-- 1 root root 8 Apr 4 12:34 pokeball include //// pokeball include //// include //// o ...

Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)

// // This exploit uses the pokemon exploit of the dirtycow vulnerability // as a base and automatically generates a new passwd line. // The user will be prompted for the new password when the binary is run. // The original /etc/passwd file is then backed up to /tmp/passwd.bak // and overwrites t...

Linux Kernel Dirty COW PTRACE_POKEDATA Privilege Escalation

// // This exploit uses the pokemon exploit as a base and automatically // generates a new passwd line. The original /etc/passwd is then // backed up to /tmp/passwd.bak and overwritten with the new line. // The user will be prompted for the new password when the binary is run. // After running th...

Linux Kernel Dirty COW PTRACE_POKEDATA Privilege Escalation

// $ echo pikachu|sudo tee pokeball;ls -l pokeball;gcc -pthread pokemon.c -o d;./d pokeball miltank;cat pokeball include //// pikachu include //// -rw-r--r-- 1 root root 8 Apr 4 12:34 pokeball include //// pokeball include //// include //// o o/ include //// @@ \ include //// \ , /miltank include...

Linux Kernel 2.6.22 < 3.9 - 'Dirty COW PTRACE_POKEDATA' Race Condition (Write Access Method)

// $ echo pikachu|sudo tee pokeball;ls -l pokeball;gcc -pthread pokemon.c -o d;./d pokeball miltank;cat pokeball include //// pikachu include //// -rw-r--r-- 1 root root 8 Apr 4 12:34 pokeball include //// pokeball include //// include //// o o/ include //// @@ \ include //// \ , /miltank include...

Linux Kernel 2.6.22 3.9 - Dirty COW PTRACE_POKEDATA Race Condition (Write Access Method)

Linux Kernel 2.6.22 3.9 - Dirty COW PTRACEPOKEDATA Race Condition Write Access Method // $ echo pikachu|sudo tee pokeball;ls -l pokeball;gcc -pthread pokemon.c -o d;./d pokeball miltank;cat pokeball include //// pikachu include //// -rw-r--r-- 1 root root 8 Apr 4 12:34 pokeball include ////...