Clik here to view.
Da WordPress a root con Hackademic
Imparare a sfruttare le vulnerabilità su macchine di prova permette di potersi allenare e poter, in un futuro, riuscire a trovarle su dispositivi reali, con tutte le difficoltà collegate ad esse. In...
View ArticleLinux Kernel Dirty COW PTRACE_POKEDATA Privilege Escalation
// // This exploit uses the pokemon exploit as a base and automatically // generates a new passwd line. The original /etc/passwd is then // backed up to /tmp/passwd.bak and overwritten with the new...
View ArticleLinux BPF Local Privilege Escalation
#include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #ifndef __NR_bpf # if...
View ArticleClik here to view.
Imparare a sfruttare vulnerabilità: Kioptrix Livello 3
Ed eccoci al penultimo livello! Come al solito, la macchina virtuale si trova a questo indirizzo. Per chi si fosse perso i livelli precedenti, nel livello 1 sono entrato nel dispositivo utilizzando...
View ArticleRHEL 7.0 / 7.1 abrt / sosreport Local Root
#!/usr/bin/python # CVE-2015-5287 (?) # abrt/sosreport RHEL 7.0/7.1 local root # rebel 09/2015 # [user@localhost ~]$ python sosreport-rhel7.py # crashing pid 19143 # waiting for dump directory #...
View ArticleClik here to view.
CentOS 7.1 / Fedora 22 abrt Local Root
#!/usr/bin/python # CVE-2015-5273 + CVE-2015-5287 # CENTOS 7.1/Fedora22 local root (probably works on SL and older versions too) # abrt-hook-ccpp insecure open() usage + abrt-action-install-debuginfo...
View ArticleCumulus Linux’s Switch clcmd_server Local Privilege Escalation
Title =================== Cumulus Linux's Switch Configuration Tools Backend, clcmd_server, Vulnerable to Local Privilege Escalation Summary =================== Cumulus Linux's Switch Configuration...
View ArticleLinux Abrt / Apport Race Condition / Symlink
Hello, this is CVE-2015-1318 and CVE-2015-1862 (essentially the same bugs in two different implementations, apport and abrt respectively). These were discussed on the vendors list last week. If the...
View ArticleLinux Apport/Abrt Local Root Exploit
#define _GNU_SOURCE #include <stdio.h> #include <unistd.h> #include <stdlib.h> #include <fcntl.h> #include <signal.h> #include <elf.h> #include <err.h>...
View ArticleWordPress Fraction Theme 1.1.1 Privilege Escalation
------------------------------------------------------------------------------ WordPress Fraction Theme 1.1.1 Previlage Escalation...
View ArticleWordPress WPLMS 1.8.4.1 Privilege Escalation
------------------------------------------------------------------------------ WordPress WPLMS Theme Previlege Escalation ------------------------------------------------------------------------------...
View ArticleWordPress Quasar Theme 1.9.1 Privilege Escalation
------------------------------------------------------------------------------ WordPress Quasar Theme Previlege Escalation...
View ArticleOSSEC 2.8 Privilege Escalation
#!/usr/bin/python # Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation # Date: 14-11-14 # Exploit Author: skynet-13 # Vendor Homepage: www.ossec.net/ #...
View ArticleGNU libc 2.12.1 LD_AUDIT libpcprofile.so Local Root
#!/bin/sh # Exploit Title: GNU libc <= 2.12.1 LD_AUDIT Root Exploit # Date: 05/11/2014 # Exploit Author: ssbostan # Vendor Homepage: http://www.gnu.org/software/libc/ # Software Link:...
View ArticleGNU libc 2.12.1 LD_AUDIT libmemusage.so Local Root
#!/bin/sh # Exploit Title: GNU libc <= 2.12.1 LD_AUDIT Root Exploit # Date: 05/11/2014 # Exploit Author: ssbostan # Vendor Homepage: http://www.gnu.org/software/libc/ # Software Link:...
View ArticleNuevoLabs flash player for clipshare SQL Injection
Nuevolabs Nuevoplayer for clipshare SQL Injection ======================================================================= :: ADVISORY SUMMARY :: Title: Nuevolabs Nuevoplayer for clipshare Sql...
View ArticleDell SonicWall GMS v7.2.x – Persistent Web Vulnerability
Document Title: =============== Dell SonicWall GMS v7.2.x - Persistent Web Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1222 Release...
View ArticleClik here to view.
Linux PolicyKit Race Condition Privilege Escalation
## # This module requires Metasploit: http//metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class Metasploit4 < Msf::Exploit::Local Rank = GreatRanking...
View ArticleLinux Kernel 3.16.1 FUSE Privilege Escalation
/* FUSE-based exploit for CVE-2014-5207 Copyright (c) 2014 Andy Lutomirski Based on code that is: Copyright (C) 2001-2007 Miklos Szeredi <miklos@szeredi.hu> This program can be distributed...
View ArticleMacOSX 10.9.2/XNU HFS Multiple Vulnerabilities
MacOSX/XNU HFS Multiple Vulnerabilities Maksymilian Arciemowicz http://cxsecurity.com/ http://cifrex.org/ =================== On November 8th, I've reported vulnerability in hard links for HFS+...
View Article
