+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Looking for local root for 2.6.18-402 CentOS 5.11 (/showthread.php?tid=5824378)
Looking for local root for 2.6.18-402 CentOS 5.11 - Ariana Grande - Apr 13, 2018
-snip--snip--snip--snip--snip--snip--snip--snip--snip-
RE: Looking for local root for 2.6.18-402 CentOS 5.11 - explosivepastry - Apr 13, 2018
Have you already tried this?
https://www.exploit-db.com/exploits/42274/
RE: Looking for local root for 2.6.18-402 CentOS 5.11 - Ariana Grande - Apr 13, 2018
-snip--snip--snip--snip--snip-
RE: Looking for local root for 2.6.18-402 CentOS 5.11 - explosivepastry - Apr 13, 2018
Let me throw CentOs into a vm and ill try and see if i can get it to compile
You also might want to look into this to see if this works.
https://www.[censored].com/docs/patching-the-dirty-cow-exploit-on-centos
RE: Looking for local root for 2.6.18-402 CentOS 5.11 - Ariana Grande - Apr 13, 2018
-snip--snip--snip--snip--snip--snip--snip-
RE: Looking for local root for 2.6.18-402 CentOS 5.11 - kcitrap - Apr 14, 2018
Because a version has known vulnerabilities, it doesn't mean the vulnerability hasn't been patched. Without being on the machine it's kinda hard to know what's going on to help you. There are MANY ways to privesc other than vulnerable kernel exploits. Have you checked for SUID (find / -perm -u=s -type f 2>/dev/null)? Can current use run anything as root (sudo -l)? Are there any cronjobs? Can you find any hardcoded credentials? Is /etc/passwd world writable? You mentioned Dirtycow wrote to /etc/passwd