perf-exploiter

perf-exploiter CVE-2014-2630 En una de nuestras recientes pruebas de penetración, abusamos de una vulnerabilidad que afecta a un binario suid llamado "xglance-bin". Parte de la solución HP Performance Monitoring , nos permitió escalar nuestras sesiones locales sin privilegios en algunos sistemas...

HP Performance Monitoring xglance Privilege Escalation Exploit

This Metasploit module is an exploit that takes advantage of xglance-bin, part of HP's Glance or Performance Monitoring version 11 and subsequent, which was compiled with an insecure RPATH option. The RPATH includes a relative path to -L/lib64/ which can be controlled by a user. Creating librarie...

HP Performance Monitoring xglance Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP Performance Monitoring xglance Priv Esc', 'Description' = %q This exploit takes advantage of xglance-bin, part of HP's Glance or Performance...

xglance-bin 11.00 - Privilege Escalation

Exploit Title: xglance-bin 11.00 - Privilege Escalation Exploit Author: Robert Jaroszuk and Marco Ortisi RedTimmy Security Date: 2020-02-01 Tested on: RHEL 5.x/6.x/7.x/8.x CVE: CVE-2014-2630 Disclamer: This exploit is for educational purpose only More details on...

xglance-bin 11.00 - Privilege Escalation

xglance-bin 11.00 - Privilege Escalation Exploit Title: xglance-bin 11.00 - Privilege Escalation Exploit Author: Robert Jaroszuk and Marco Ortisi RedTimmy Security Date: 2020-02-01 Tested on: RHEL 5.x/6.x/7.x/8.x CVE: CVE-2014-2630 Disclamer: This exploit is for educational purpose only More...

HP Performance Monitoring xglance Priv Esc

This exploit takes advantage of xglance-bin, part of HP's Glance or Performance Monitoring version 11 'and subsequent' , which was compiled with an insecure RPATH option. The RPATH includes a relative path to -L/lib64/ which can be controlled by a user. Creating libraries in this location will...