Hack Forums
It's either not rootable or the exploit is screwed. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: It's either not rootable or the exploit is screwed. (/showthread.php?tid=2788702)



It's either not rootable or the exploit is screwed. - Bacardi - Aug 18, 2012

Got a shell on a server and this is the uname -a.
Code
Linux xxxx.com 2.6.9-78.ELsmp #1 SMP Fri Jul 25 00:04:28 EDT 2008 i686 i686 i386 GNU/Linux

Sec info:
Code
Server software: Apache/2.0.52 (Red Hat)
Disabled PHP Functions: system,exec,passthru,escapeshellcmd,pcntl_exec,shell_exec
Open base dir: /www/users/:/tmp/
cURL support: enabled
Supported databases: MySql (4.1.12), MSSQL

I've tried all of the 2.6.9 exploit listed here http://localroot.th3-0utl4ws.com/

Whenever I try to execute one of them it says this.
Code
sh: [25065: 2] tcsetattr: Invalid argument


I also tried this one just in case.
http://www.tsirogiannis.com/uncategorized/linux-kernel-2-42-6-sock_sendpage-local-root-exploit/

That just shows:
Code
sh: no job control in this shell


Could the disabled PHP functions be the cause?

Any input is appreciated.


* - HaxOr❤ - Aug 18, 2012

Can you PM me the shell?
I can try...


* - Bacardi - Aug 18, 2012

(Aug 18, 2012 09:09 AM)๖ۣۜΗ α x O r ♥ Wrote:  Can you PM me the shell?
I can try...

PMed you the shell. Hope you can figure it out.


* - HaxOr❤ - Aug 18, 2012

Successfully rooted.
Enjoy mate! 🤝

You can close this now BTW.


* - Bacardi - Aug 18, 2012

I will, but I remember a thread about what you can when you have root. Can't find it anywhere though.


* - rvltr - Aug 18, 2012

i have one giving me the same thing, nothing but sh: [25065: 2] tcsetattr: Invalid argument when trying to execute any locals ive tried