Apr 13, 2018 01:07 AM
(This post was last modified: Sep 28, 2018 03:50 PM by Ariana Grande.)
-snip--snip--snip--snip--snip--snip--snip--snip--snip-
Looking for local root for 2.6.18-402 CentOS 5.11 |
Apr 13, 2018 09:45 PM
(This post was last modified: Sep 28, 2018 03:50 PM by Ariana Grande.)
-snip--snip--snip--snip--snip-
Apr 13, 2018 09:58 PM
(This post was last modified: Apr 13, 2018 10:01 PM by explosivepastry.)
Let me throw CentOs into a vm and ill try and see if i can get it to compile
You also might want to look into this to see if this works. https://www.[censored].com/docs/patching-the-dirty-cow-exploit-on-centos
Apr 13, 2018 10:15 PM
(This post was last modified: Sep 28, 2018 03:50 PM by Ariana Grande.)
-snip--snip--snip--snip--snip--snip--snip-
Because a version has known vulnerabilities, it doesn't mean the vulnerability hasn't been patched. Without being on the machine it's kinda hard to know what's going on to help you. There are MANY ways to privesc other than vulnerable kernel exploits. Have you checked for SUID (find / -perm -u=s -type f 2>/dev/null)? Can current use run anything as root (sudo -l)? Are there any cronjobs? Can you find any hardcoded credentials? Is /etc/passwd world writable? You mentioned Dirtycow wrote to /etc/passwd
|
|
|
