76 matches found
linux/ARM (Meta) Create a New User with UID 0
Exploit for linux/x86 platform in category shellcode ============================================= linux/ARM Meta Create a New User with UID 0 ============================================= Exploit Title: Linux/ARM - Create a new user with UID 0 MSF Date: 2010-11-25 Author: Jonathan Salwan - twitt...
Linux/ARM - add root user with password - 151 bytes
Linux/ARM - add root user with password - 151 bytes. Shellcode exploit for arm platform / Title: Linux/ARM - add root user with password - 151 bytes Date: 2010-11-25 Tested on: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan - twitter: @shellstorm http://shell-storm.org Informations: ------------- -...
Create a UNIX back door for primary articles intermediate articles advanced article-vulnerability warning-the black bar safety net
The primary article The most simple method, is in the password file passwd to add a UID 0 account. But the best don't do it, because as long as the system administrator to check the password file will“drain the filling”. The following is in /etc/passwd password file, add a UID 0 account C Program...
Overland Guardian OS 5.1.041 - Local Privilege Escalation
Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less /tmp/top.log and type in '!/bin/sh'. Th...
Linux/x86 - Write to /etc/passwd with uid(0) + gid(0) Shellcode (74 bytes)
Linux/x86 - Write to /etc/passwd with uid0 + gid0 Shellcode 74 bytes. Shellcode exploit for Linuxx86 platform / This shellcode writes to /etc/passwd the string for the user with uid&gid == 0; written by dev0id [email protected] rootteam.void.ru rus-sec /Efnet.org greetz: nerf w00w00 BITS 32 jmp shor...
BusyBox (uname) Local Format String Exploit
No description provided by source. / lul-busybox.c copyright C 2008 lul-disclosure inc. All rights reserved. this code is distributed with the LPL license agreement http://lul-disclosure.net/LPL.txt moar commonly known as the EULA Epic User License Agreement busybox uname format string exploit by...
Linux Kernel < 2.6.11.5 BLUETOOTH Stack Local Root Exploit
No description provided by source. / LINUX KERNEL Not tainted VLI EFLAGS: 00010286 2.6.9 EIP is at btsockcreate+0x3d/0x13...
Linux Add User
Create a new user with UID 0 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework AddUser ------- Adds a UID 0 user to /etc/passwd. module MetasploitModule CachedSize = 97 include Msf::Payload::Single include...
IBM AIX 4.3 - usrliblpddigest Local Buffer Overflow
IBM AIX 4.3 - usrliblpddigest Local Buffer Overflow / source: https://www.securityfocus.com/bid/2033/info AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge. The problem occurs in the...
IBM AIX 4.3 - '/usr/lib/lpd/digest' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/2033/info AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge. The problem occurs in the digest binary. It is reported that it is possible t...
CVE-2000-0038
CVE-2000-0038 concerns glFtpD (glftpd) software where a default glftpd user account exists with a default password and a UID of 0. The vulnerability is tied to this account’s privileged UID, enabling potential unauthorized access or privilege elevation. The PT-1999-1846 entry notes affected versi...
CVE-1999-0555
CVE-1999-0555 describes a UID 0 issue where a Unix account whose name is not "root" has root privileges. Multiple connected sources corroborate that any non-root-named account can effectively gain full control, exposing complete confidentiality, integrity, and availability impact. Red Hat and PT-...
CVE-2000-0038: Undefined Security Weakness
glFtpD includes a default glftpd user account with a default password and a UID of 0...
CVE-1999-0555: Undefined Security Weakness
A Unix account with a name other than "root" has UID 0, i.e. root privileges...
CVE-1999-0084
CVE-1999-0084 affects certain NFS servers . The vulnerability permits a local user to perform a privileged action by running mknod to create a writable kmem device and set the UID to 0, effectively enabling a privilege escalation to root as described in the provided sources. Multiple connected do...