+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: 2006 grsec. Rootable? (/showthread.php?tid=2971168)
2006 grsec. Rootable? - Bacardi - Oct 25, 2012
I manage to get a shell on this website. It's from 2006 but has a grsec patch.
The uname -a:
Code
Linux xxxxxx 2.4.33.3-grsec #2 SMP Thu Sep 14 21:34:19 EDT 2006 i686Since it's grsec, is it rootable?
* - Starfall - Oct 25, 2012
Well, technically, yes.
It's still gonna be hell, though, unless you use a userland non-memory-corruption-based exploit.
Jon Oberheide and Dan Rosenberg did a great paper on a technique they call "stackjacking" that can get you root on quite a few grsecurity kernels.
http://jon.oberheide.org/blog/2011/04/20/stackjacking-your-way-to-grsec-pax-bypass/
Good luck, you're gonna need it, and may the source be with you.