jackpot? server rooted. - Printable Version

jackpot? server rooted. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: jackpot? server rooted. (/showthread.php?tid=4797807)

jackpot? server rooted. - EbonCipher - Apr 27, 2015

./rooted 2015 kernel! Hikashin!.

[Image: rootede27ff.jpg]

* - sp3ctrum - Apr 27, 2015

Not sure about this one here. How do we know its a 2015 kernel? Can we get a:

Code 
uname -a

Then this picture is just blurry as can be, and doing a little image analysis shows that there are these strange offset colors coming from your directory listing, and there is no black between the text itself..

[img]http://fotoforensics.com/analysis.php?id=842c0bf50dec78e080fd8236673e09942d94bb2f.111338&fmt=ela[/img]

Also what are you using to connect to that box, very rare I see an ssh client that provides a nice linux color scheme provided like the 'ls' command. I could be wrong, I'm just saying more information and proof would be quite astonishing considering this is a 2015 box, anyone can just throw a bad picture up and claim its a rooted 2015 kernel, get my drift :3 ?

* - knightserv - Apr 29, 2015

i want more exp please can't tell too and not sure this is for real...

* - Inkling - Apr 29, 2015

I don't want to make assumptions here, but you said you rooted this how exactly?

Local kernel exploit for a 2015 kernel?

* - EbonCipher - Apr 30, 2015

(Apr 29, 2015 09:58 PM)Inkling Wrote: I don't want to make assumptions here, but you said you rooted this how exactly?

Local kernel exploit for a 2015 kernel?

Poc.

* - Hooded Robin - Apr 30, 2015

hostname = exploiter, a root password of 'sss' (cracked it in like 2secs), and magically the terminals now have different color schemes....

if I had to guess this is a picture of some home Ubuntu install you stood up for local testing, congrats I guess...

* - EbonCipher - Apr 30, 2015

(Apr 30, 2015 07:08 AM)Hooded Robin Wrote: hostname = exploiter, a root password of 'sss' (cracked it in like 2secs), and magically the terminals now have different color schemes....

if I had to guess this is a picture of some home Ubuntu install you stood up for local testing, congrats I guess...

Okay now that's too hilarious to look at. Let me give you proof that you can't deny, but i don't blame you. gimme a sec. I'll pm you.

* - Easy987 - Apr 30, 2015

How you rooted the server? You founded vuln in the website?

* - Soulo - May 1, 2015

(Apr 27, 2015 10:30 PM)The_Chang Wrote: Not sure about this one here. How do we know its a 2015 kernel?

I could be wrong, I'm just saying more information and proof would be quite astonishing considering this is a 2015 box, anyone can just throw a bad picture up and claim its a rooted 2015 kernel, get my drift :3 ?

(Apr 29, 2015 09:58 PM)Inkling Wrote: Local kernel exploit for a 2015 kernel?

Lol? Why are you guys acting like Tavis alone hasn't already dropped multiple privilege escalation vulnerabilities that work on default RHEL and Ubuntu installations (that yes, have 2015 kernels)?

* - EbonCipher - May 1, 2015

(May 1, 2015 04:31 PM)Soulo Wrote: Lol? Why are you guys acting like Tavis alone hasn't already dropped multiple privilege escalation vulnerabilities that work on default RHEL and Ubuntu installations (that yes, have 2015 kernels)?

That's right!. They have 2015 kernels. 🤝

* - SaxyMadaFaka - May 1, 2015

This is Apport/Abrt Local Root Exploit https://www.exploit-db.com/exploits/36746/

i've rooted 200+ servers with :D works great against ubuntu servers

* - EbonCipher - May 1, 2015

(May 1, 2015 08:59 PM)Skid 1337 Wrote: This is Apport/Abrt Local Root Exploit https://www.exploit-db.com/exploits/36746/

i've rooted 200+ servers with :D works great against ubuntu servers

yes it does indeed!. I love it!. 🤝

* - hikashin - Jun 15, 2015

ahah i remember this :) this is not 2015 kernel guys just 2013 unpatched ubuntu ;)