Вопрос по работе сплоита!?

Discussion in 'Безопасность и Анонимность' started by M@rtein, 9 Feb 2009.

  1. M@rtein

    M@rtein New Member

    Joined:
    9 Aug 2007
    Messages:
    56
    Likes Received:
    3
    Reputations:
    0
    Скачал сплоит http://milw0rm.com/exploits/5092

    Версия ядра Linux ws9 2.6.18-6-486 #1 Mon Oct 13 15:35:23 UTC 2008 i686 GNU/Linux

    gcc /tmp/1.c -o /tmp/1 -static -Wno-format
    /tmp/1.c:287:2: warning: no newline at end of file
    /tmp/1
    -----------------------------------
    Linux vmsplice Local Root Exploit
    By qaaz
    -----------------------------------
    [+] mmap: 0x0 .. 0x1000
    [+] page: 0x0
    [+] page: 0x20
    [+] mmap: 0x4000 .. 0x5000
    [+] page: 0x4000
    [+] page: 0x4020
    [+] mmap: 0x1000 .. 0x2000
    [+] page: 0x1000
    [+] mmap: 0xb7f14000 .. 0xb7f46000
    [-] vmsplice: Bad address

    Почему не работает подскажите пожалуйста.
     
  2. scrat

    scrat кодер

    Joined:
    8 Apr 2007
    Messages:
    625
    Likes Received:
    541
    Reputations:
    3
    так...
    Code:
    _vmsplice(pi[1], &iov, 1, 0);
    значит syscall4:
    Code:
    #if defined (_syscall4)
    #define __NR__vmsplice	__NR_vmsplice
    _syscall4(
    	long, _vmsplice,
    	int, fd,
    	struct iovec *, iov,
    	unsigned long, nr_segs,
    	unsigned int, flags)
    
    #else
    #define _vmsplice(fd,io,nr,fl)	syscall(__NR_vmsplice, (fd), (io), (nr), (fl))
    #endif
    
    проверяй валидность вводимых параметров.

    ps возможно ядро патченое...
     
    1 person likes this.
  3. Neoveneficus

    Neoveneficus Elder - Старейшина

    Joined:
    10 Apr 2008
    Messages:
    235
    Likes Received:
    125
    Reputations:
    23
    2008-02-09 Linux Kernel 2.6.17 - 2.6.24.1 vmsplice Local Root Exploit
    У тебя ядро более позднее, патченное.
     
    1 person likes this.
  4. M@rtein

    M@rtein New Member

    Joined:
    9 Aug 2007
    Messages:
    56
    Likes Received:
    3
    Reputations:
    0
    Спасибо большое +. А есть на эту версию сплоит?
     
  5. Neoveneficus

    Neoveneficus Elder - Старейшина

    Joined:
    10 Apr 2008
    Messages:
    235
    Likes Received:
    125
    Reputations:
    23
    2008 год - октябрь
    в паблике нет
    про приват не знаю - спрашивай моа
     
    #5 Neoveneficus, 9 Feb 2009
    Last edited: 9 Feb 2009