Тема: Повышение прав [задай вопрос - получи ответ]
Показать сообщение отдельно

  #462  
Старый 27.01.2013, 23:24
ukrpunk
Познающий
Регистрация: 31.10.2011
Сообщений: 35
Провел на форуме:
7946

Репутация: 5
По умолчанию
Помогите порутать

uname -a

Код:
Linux 2.6.18-194.11.3.el5.028stab071.5.owl1 #1 SMP Sat Sep 25 02:43:36 MSD 2010 x86_64
ls -la /boot

Код:
sh-2.05$ ls -la /boot
ls -la /boot
ls: /boot: Permission denied
ls -la --full-time /lib/lib*

Код:
sh-2.05$ ls -la --full-time /lib/lib*
ls -la --full-time /lib/lib*
-rwxr-xr-x    1 root     root        21463 2003-06-28 19:22:27.000000000 +0400 /lib/libBrokenLocale-2.1.3.so
lrwxrwxrwx    1 root     root           24 2010-09-10 12:14:20.000000000 +0400 /lib/libBrokenLocale.so.1 -> libBrokenLocale-2.1.3.so
-rwxr-xr-x    1 root     root        16490 2003-06-28 19:23:01.000000000 +0400 /lib/libNoVersion-2.1.3.so
lrwxrwxrwx    1 root     root           21 2010-09-10 12:14:20.000000000 +0400 /lib/libNoVersion.so.1 -> libNoVersion-2.1.3.so
-rwxr-xr-x    1 root     root        47231 2003-06-28 19:23:13.000000000 +0400 /lib/libSegFault.so
-rwxr-xr-x    1 root     root      4060791 2003-06-28 19:22:22.000000000 +0400 /lib/libc-2.1.3.so
lrwxrwxrwx    1 root     root           13 2010-09-10 12:14:20.000000000 +0400 /lib/libc.so.6 -> libc-2.1.3.so
lrwxrwxrwx    1 root     root           11 2010-09-10 12:14:20.000000000 +0400 /lib/libcap.so -> libcap.so.1
lrwxrwxrwx    1 root     root           14 2010-09-10 12:14:20.000000000 +0400 /lib/libcap.so.1 -> libcap.so.1.10
-rw-r--r--    1 root     root         9478 2004-02-12 01:15:09.000000000 +0300 /lib/libcap.so.1.10
lrwxrwxrwx    1 root     root           17 2010-09-10 12:14:20.000000000 +0400 /lib/libcom_err.so.2 -> libcom_err.so.2.0
-rwxr-xr-x    1 root     root         7910 2002-10-12 18:08:40.000000000 +0400 /lib/libcom_err.so.2.0
-rwxr-xr-x    1 root     root       125934 2003-06-28 19:22:55.000000000 +0400 /lib/libcrypt-2.1.3.so
lrwxrwxrwx    1 root     root           17 2010-09-10 12:14:20.000000000 +0400 /lib/libcrypt.so.1 -> libcrypt-2.1.3.so
-rwxr-xr-x    1 root     root       821102 2003-06-28 19:22:25.000000000 +0400 /lib/libdb-2.1.3.so
lrwxrwxrwx    1 root     root           15 2010-09-10 12:14:20.000000000 +0400 /lib/libdb.so.2 -> libdb1-2.1.3.so
lrwxrwxrwx    1 root     root           14 2010-09-10 12:14:20.000000000 +0400 /lib/libdb.so.3 -> libdb-2.1.3.so
-rwxr-xr-x    1 root     root       225419 2003-06-28 19:22:24.000000000 +0400 /lib/libdb1-2.1.3.so
lrwxrwxrwx    1 root     root           15 2010-09-10 12:14:20.000000000 +0400 /lib/libdb1.so.2 -> libdb1-2.1.3.so
-rwxr-xr-x    1 root     root        71839 2003-06-28 19:23:20.000000000 +0400 /lib/libdl-2.1.3.so
lrwxrwxrwx    1 root     root           14 2010-09-10 12:14:20.000000000 +0400 /lib/libdl.so.1 -> libdl.so.1.9.5
-rwxr-xr-x    1 root     root         5660 2000-02-03 17:14:30.000000000 +0300 /lib/libdl.so.1.9.5
lrwxrwxrwx    1 root     root           14 2010-09-10 12:14:20.000000000 +0400 /lib/libdl.so.2 -> libdl-2.1.3.so
lrwxrwxrwx    1 root     root           13 2010-09-10 12:14:20.000000000 +0400 /lib/libe2p.so.2 -> libe2p.so.2.3
-rwxr-xr-x    1 root     root        18179 2002-10-12 18:08:40.000000000 +0400 /lib/libe2p.so.2.3
lrwxrwxrwx    1 root     root           16 2010-09-10 12:14:20.000000000 +0400 /lib/libext2fs.so.2 -> libext2fs.so.2.4
-rwxr-xr-x    1 root     root        97151 2002-10-12 18:08:40.000000000 +0400 /lib/libext2fs.so.2.4
-rwxr-xr-x    1 root     root       537106 2003-06-28 19:22:30.000000000 +0400 /lib/libm-2.1.3.so
lrwxrwxrwx    1 root     root           13 2010-09-10 12:14:20.000000000 +0400 /lib/libm.so.6 -> libm-2.1.3.so
-rwxr-xr-x    1 root     root       367264 2003-06-28 19:22:59.000000000 +0400 /lib/libnsl-2.1.3.so
lrwxrwxrwx    1 root     root           15 2010-09-10 12:14:20.000000000 +0400 /lib/libnsl.so.1 -> libnsl-2.1.3.so
-rwxr-xr-x    1 root     root       143557 2003-06-28 19:23:01.000000000 +0400 /lib/libnss1_compat-2.1.3.so
lrwxrwxrwx    1 root     root           23 2010-09-10 12:14:20.000000000 +0400 /lib/libnss1_compat.so.1 -> libnss1_compat-2.1.3.so
-rwxr-xr-x    1 root     root       151687 2003-06-28 19:23:01.000000000 +0400 /lib/libnss1_db-2.1.3.so
lrwxrwxrwx    1 root     root           19 2010-09-10 12:14:20.000000000 +0400 /lib/libnss1_db.so.1 -> libnss1_db-2.1.3.so
-rwxr-xr-x    1 root     root        62397 2003-06-28 19:23:01.000000000 +0400 /lib/libnss1_dns-2.1.3.so
lrwxrwxrwx    1 root     root           20 2010-09-10 12:14:20.000000000 +0400 /lib/libnss1_dns.so.1 -> libnss1_dns-2.1.3.so
-rwxr-xr-x    1 root     root       202748 2003-06-28 19:23:00.000000000 +0400 /lib/libnss1_files-2.1.3.so
lrwxrwxrwx    1 root     root           22 2010-09-10 12:14:20.000000000 +0400 /lib/libnss1_files.so.1 -> libnss1_files-2.1.3.so
-rwxr-xr-x    1 root     root       204176 2003-06-28 19:23:00.000000000 +0400 /lib/libnss1_nis-2.1.3.so
lrwxrwxrwx    1 root     root           20 2010-09-10 12:14:20.000000000 +0400 /lib/libnss1_nis.so.1 -> libnss1_nis-2.1.3.so
-rwxr-xr-x    1 root     root       220406 2003-06-28 19:22:59.000000000 +0400 /lib/libnss_compat-2.1.3.so
lrwxrwxrwx    1 root     root           23 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_compat.so.1 -> libnss1_compat-2.1.3.so
lrwxrwxrwx    1 root     root           22 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_compat.so.2 -> libnss_compat-2.1.3.so
-rwxr-xr-x    1 root     root       193070 2003-06-28 19:22:58.000000000 +0400 /lib/libnss_db-2.1.3.so
lrwxrwxrwx    1 root     root           19 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_db.so.1 -> libnss1_db-2.1.3.so
lrwxrwxrwx    1 root     root           18 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_db.so.2 -> libnss_db-2.1.3.so
-rwxr-xr-x    1 root     root        64522 2003-06-28 19:22:57.000000000 +0400 /lib/libnss_dns-2.1.3.so
lrwxrwxrwx    1 root     root           20 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_dns.so.1 -> libnss1_dns-2.1.3.so
lrwxrwxrwx    1 root     root           19 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_dns.so.2 -> libnss_dns-2.1.3.so
-rwxr-xr-x    1 root     root       233113 2003-06-28 19:22:58.000000000 +0400 /lib/libnss_files-2.1.3.so
lrwxrwxrwx    1 root     root           22 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_files.so.1 -> libnss1_files-2.1.3.so
lrwxrwxrwx    1 root     root           21 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_files.so.2 -> libnss_files-2.1.3.so
-rwxr-xr-x    1 root     root        68935 2003-06-28 19:23:15.000000000 +0400 /lib/libnss_hesiod-2.1.3.so
lrwxrwxrwx    1 root     root           22 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_hesiod.so.2 -> libnss_hesiod-2.1.3.so
-rwxr-xr-x    1 root     root       252512 2003-06-28 19:22:59.000000000 +0400 /lib/libnss_nis-2.1.3.so
lrwxrwxrwx    1 root     root           20 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_nis.so.1 -> libnss1_nis-2.1.3.so
lrwxrwxrwx    1 root     root           19 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_nis.so.2 -> libnss_nis-2.1.3.so
-rwxr-xr-x    1 root     root       257162 2003-06-28 19:22:59.000000000 +0400 /lib/libnss_nisplus-2.1.3.so
lrwxrwxrwx    1 root     root           23 2010-09-10 12:14:20.000000000 +0400 /lib/libnss_nisplus.so.2 -> libnss_nisplus-2.1.3.so
-rwxr-xr-x    1 root     root         8163 2003-04-18 17:21:39.000000000 +0400 /lib/libnss_tcb.so.2
lrwxrwxrwx    1 root     root           11 2010-09-10 12:14:20.000000000 +0400 /lib/libpam.so -> libpam.so.0
lrwxrwxrwx    1 root     root           14 2010-09-10 12:14:20.000000000 +0400 /lib/libpam.so.0 -> libpam.so.0.75
-rwxr-xr-x    1 root     root        35380 2002-10-12 19:08:23.000000000 +0400 /lib/libpam.so.0.75
lrwxrwxrwx    1 root     root           16 2010-09-10 12:14:20.000000000 +0400 /lib/libpam_misc.so -> libpam_misc.so.0
lrwxrwxrwx    1 root     root           19 2010-09-10 12:14:20.000000000 +0400 /lib/libpam_misc.so.0 -> libpam_misc.so.0.75
-rwxr-xr-x    1 root     root        12191 2002-10-12 19:08:24.000000000 +0400 /lib/libpam_misc.so.0.75
lrwxrwxrwx    1 root     root           12 2010-09-10 12:14:20.000000000 +0400 /lib/libpamc.so -> libpamc.so.0
lrwxrwxrwx    1 root     root           15 2010-09-10 12:14:20.000000000 +0400 /lib/libpamc.so.0 -> libpamc.so.0.75
-rwxr-xr-x    1 root     root        13644 2002-10-12 19:08:24.000000000 +0400 /lib/libpamc.so.0.75
-rwxr-xr-x    1 root     root        42535 2000-11-23 19:49:00.000000000 +0300 /lib/libproc.so.2.0.6
-rwxr-xr-x    1 root     root        44732 2003-01-17 15:56:00.000000000 +0300 /lib/libproc.so.2.0.7
-rwxr-xr-x    1 root     root       288503 2003-06-28 19:23:02.000000000 +0400 /lib/libpthread-0.8.so
lrwxrwxrwx    1 root     root           17 2010-09-10 12:14:20.000000000 +0400 /lib/libpthread.so.0 -> libpthread-0.8.so
-rw-r--r--    1 root     root       187060 2002-10-12 19:16:45.000000000 +0400 /lib/libpwdb.a
lrwxrwxrwx    1 root     root           17 2010-09-10 12:14:20.000000000 +0400 /lib/libpwdb.so -> libpwdb.so.0.61.1
lrwxrwxrwx    1 root     root           17 2010-09-10 12:14:20.000000000 +0400 /lib/libpwdb.so.0 -> libpwdb.so.0.61.1
-rwxr-xr-x    1 root     root       134678 2001-03-21 16:57:17.000000000 +0300 /lib/libpwdb.so.0.61
-rwxr-xr-x    1 root     root       138870 2002-10-12 19:16:45.000000000 +0400 /lib/libpwdb.so.0.61.1
-rwxr-xr-x    1 root     root       173922 2003-06-28 19:22:57.000000000 +0400 /lib/libresolv-2.1.3.so
lrwxrwxrwx    1 root     root           18 2010-09-10 12:14:20.000000000 +0400 /lib/libresolv.so.2 -> libresolv-2.1.3.so
-rwxr-xr-x    1 root     root        74411 2003-06-28 19:23:12.000000000 +0400 /lib/librt-2.1.3.so
lrwxrwxrwx    1 root     root           14 2010-09-10 12:14:20.000000000 +0400 /lib/librt.so.1 -> librt-2.1.3.so
lrwxrwxrwx    1 root     root           12 2010-09-10 12:14:20.000000000 +0400 /lib/libss.so.2 -> libss.so.2.0
-rwxr-xr-x    1 root     root        21516 2002-10-12 18:08:40.000000000 +0400 /lib/libss.so.2.0
lrwxrwxrwx    1 root     root           15 2010-09-10 12:14:20.000000000 +0400 /lib/libtcb.so.0 -> libtcb.so.0.9.8
-rwxr-xr-x    1 root     root         9809 2003-04-18 17:21:39.000000000 +0400 /lib/libtcb.so.0.9.8
lrwxrwxrwx    1 root     root           19 2010-09-10 12:14:20.000000000 +0400 /lib/libtermcap.so.2 -> libtermcap.so.2.0.8
-rwxr-xr-x    1 root     root        11704 2002-10-12 18:55:26.000000000 +0400 /lib/libtermcap.so.2.0.8
-rwxr-xr-x    1 root     root       134832 2003-06-28 19:23:13.000000000 +0400 /lib/libthread_db-1.0.so
lrwxrwxrwx    1 root     root           19 2010-09-10 12:14:20.000000000 +0400 /lib/libthread_db.so.1 -> libthread_db-1.0.so
-rwxr-xr-x    1 root     root        44834 2003-06-28 19:23:19.000000000 +0400 /lib/libutil-2.1.3.so
lrwxrwxrwx    1 root     root           16 2010-09-10 12:14:20.000000000 +0400 /lib/libutil.so.1 -> libutil-2.1.3.so
lrwxrwxrwx    1 root     root           14 2010-09-10 12:14:20.000000000 +0400 /lib/libuuid.so.1 -> libuuid.so.1.2
-rwxr-xr-x    1 root     root        13379 2002-10-12 18:08:40.000000000 +0400 /lib/libuuid.so.1.2
mount

Код:
sh-2.05$ mount
mount
sh: /bin/mount: Permission denied
df -h

Код:
sh-2.05$ df -h
df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/simfs            100G   44G   57G  44% /
tmpfs                 256M  300K  256M   1% /tmp
tmpfs                 512M  192K  512M   1% /tmp-php
cat /etc/issue

Код:
sh-2.05$ cat /etc/issue
cat /etc/issue

                 //////////
                //        /////
               //            ////
              //               ///
             //                 ///
            //            //////////////////
           //            //   ///
          //            // ////
         //         ///////
        ///////////   //
                     ///////////////
                    //              
                   //                DataForce ISP
                  //                 Moscow, Russia
                 //

                                   Come to see us on The Web
                                      http://www.dataforce.net
          

Red.dataforce.net
cat /etc/crontab

Код:
sh-2.05$ cat /etc/crontab
cat /etc/crontab
SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/

# run-parts
01 * * * * root run-parts --report /etc/cron.hourly
02 4 * * * root run-parts --report /etc/cron.daily
22 4 * * 0 root run-parts --report /etc/cron.weekly
42 4 1 * * root run-parts --report /etc/cron.monthly
cat /proc/version

Код:
sh-2.05$ cat /proc/version
cat /proc/version
Linux version 2.6.18-194.11.3.el5.028stab071.5.owl1 (sources@x86_64.example.org) (gcc version 3.4.5) #1 SMP Sat Sep 25 02:43:36 MSD 2010
cat /proc/sys/vm/mmap_min_addr

Код:
sh-2.05$ cat /proc/sys/vm/mmap_min_addr
cat /proc/sys/vm/mmap_min_addr
cat: /proc/sys/vm/mmap_min_addr: Operation not permitted
pwd

Код:
/home/clients/w_zak/public_html/includes
ls -la /usr/bin/staprun

Код:
ls: /usr/bin/staprun: No such file or directory
Пробовал enlightenment и из гугла какието 2 сплойта. Енгишмент не отработал чета, из гугла не скомпилировались

PS пробовал этот _http://cyb3r-r00t.blogspot.de/2011/09/local-r00t-exploit-for-2618-194-x8664.html

пишет отак

Цитата:
Сообщение от None  
sh-2.05$ gcc -o exp exp.c gcc -o exp exp.c exp.c: In function `fillsocketcallAT': exp.c:641: `MCAST_MSFILTER' undeclared (first use in this function) exp.c:641: (Each undeclared identifier is reported only once exp.c:641: for each function it appears in.)
 
Ответить с цитированием