798 matches found
Sun VirtualBox 3.0.6 - Local Privilege Escalation
!/bin/sh CVE-2009-3692 Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from = fopen"/bin/sh","rb"; to = fopen"./sh","wb"; while!feoffrom ch = fgetcfrom; if!feoffrom fputcch, to; fclosefrom; fcloseto; fd =...
VMWare Fusion <= 2.0.5 vmx86 kext local kernel root exploit
Exploit for unknown platform in category local exploits =========================================================== VMWare Fusion include include include include include include include mach/...
Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit [2]
Exploit for linux platform in category local exploits =========================================================== Linux Kernel 2.4/2.6 socksendpage Local Root Exploit 2 =========================================================== This is the second version of Linux socksendpage NULL pointer...
Linux Kernel < 2.6.19 udp_sendmsg Local Root Exploit (x86/x64)
No description provided by source. / second verse, same as the first CVE-2009-2698 udpsendmsg, x86/x64 Cheers to Julien/Tavis for the bug, p0c73n1 for just throwing code at NULL and finding it executed This exploit is a bit more nuanced and thoughtful ; use ./therebel.sh for everything At this...
Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit (ppc)
No description provided by source. / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwar...
Microsoft IIS 5.0/6.0 FTP Server Remote Stack Overflow Exploit (win2k)
No description provided by source. IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection August 2009 - KEEP THIS 0DAY PRIV8 use IO::Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...
Linux Kernel 2.6 < 2.6.19 (32bit) ip_append_data() ring0 Root Exploit
No description provided by source. / 0x82-CVE-2009-2698 Linux kernel 2.6 2.6.19 32bit ipappenddata local ring0 root exploit Tested White Box 42.6.9-5.ELsmp, CentOS 4.42.6.9-42.ELsmp, CentOS 4.52.6.9-55.ELsmp, Fedora Core 42.6.11-1.1369FC4smp, Fedora Core 52.6.15-1.2054FC5, Fedora Core...
Linux Kernel 2.6 < 2.6.19 (32bit) ip_append_data() ring0 Root Exploit
Exploit for linux platform in category local exploits ===================================================================== Linux Kernel 2.6 include include include include include include unsigned int uid, gid; void getrootuidunsigned task unsigned addr=task;...
Linux Kernel 2.4/2.6 sock_sendpage() ring0 Root Exploit (simple ver)
Exploit for linux platform in category local exploits ==================================================================== Linux Kernel 2.4/2.6 socksendpage ring0 Root Exploit simple ver ==================================================================== / 0x82-CVE-2009-2692 Linux kernel 2.4/2.6...
FreeBSD <= 6.1 kqueue() NULL pointer Dereference Local Root Exploit
Exploit for freebsd platform in category local exploits =================================================================== FreeBSD include include include include include include include include include include include include int fd, kq; struct kevent kev, ke; struct timespec timeout; volatile...
Linux Kernel 2.x sock_sendpage() Local Root Exploit (Android Edition)
No description provided by source. Source for exploiting CVE-2009-2692 on Android; Hole is closed in Android kernels released August 2009 or later. orig: http://zenthought.org/content/file/android-root-2009-08-16-source back: http://milw0rm.com/sploits/android-root-20090816.tar.gz...
Linux Kernel 2.x sock_sendpage() Local Root Exploit (Android Edition)
Exploit for linux platform in category local exploits ===================================================================== Linux Kernel 2.x socksendpage Local Root Exploit Android Edition ===================================================================== Source for exploiting CVE-2009-2692 on...
Linux Kernel 2.x sock_sendpage() Local Root Exploit #2
No description provided by source. Linux NULL pointer dereference due to incorrect protoops initializations ------------------------------------------------------------------------- Quick and dirty exploit for this one: http://www.frasunek.com/protoops.tgz back:...
Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit
No description provided by source. !/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the ...
Apple MACOS X xnu <= 1228.9.59 Local Kernel Root Exploit
Exploit for macOS platform in category local exploits ======================================================== Apple MACOS X xnu Apple MACOS X xnu include include include include include include / profil defines / define PROFILITEMSIZE 64 define PROFILBLKSIZE 65536 define PROFILBLKNUM 84 / workq...
Linux Kernel 2.6.29 - 'ptrace_attach()' Race Condition Privilege Escalation
/ GNU/Linux kernel 2.6.29 ptraceattach local root race condition exploit. ========================================================================== This is a local root exploit for the 2.6.29 ptraceattach race condition that allows a process to gain elevated privileges under certain conditions...
Linux Kernel 2.6.29 - ptrace_attach() Race Condition Privilege Escalation
Linux Kernel 2.6.29 - ptraceattach Race Condition Privilege Escalation / GNU/Linux kernel 2.6.29 ptraceattach local root race condition exploit. ========================================================================== This is a local root exploit for the 2.6.29 ptraceattach race condition that...
Linux kernel <2.6.29 exit_notify() local root exploit
No description provided by source. !/bin/sh gw-notexit.sh: Linux kernel 2.6.29 exitnotify local root exploit by Milen Rangelov gat3way-at-gat3way-dot-eu Based on 'exitnotify' CAPKILL verification bug found by Oleg Nestorov. Basically it allows us to send arbitrary signals to a privileged suidroot...
Mac OS X xnu Root Exploit
!/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/null if $? != 0 ; then echo " failed" exit $? else echo " done" fi f...
pwned.c - linux 2.4 and 2.6 sys_uselib local root exploit
No description provided by source. / pwned.c - linux 2.4 and 2.6 sysuselib local root exploit. PRIVATE. it's not the best one, the ldt approach is definitively better. discovered may 2004. no longer private because lorian/cliph/ihaquer can lick my balls. c 2004 sd [email protected] requieres cca 1...