full-disclosure - Re: RHEL Linux Kernel Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 15 Dec 2010 13:32:36 -0500
From: musnt live <musntlive@...il.com>
To: Greg Whynott <Greg.Whynott@...r.on.ca>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: RHEL Linux Kernel Exploit

On Wed, Dec 15, 2010 at 1:04 PM, Greg Whynott <Greg.Whynott@...r.on.ca> wrote:
> funny...
> 1. you were root when you ran the code!  epic elite.
> 2. he said "red hat"  NOT redhat based.   Redhat has no control over what others do to "redhat based" efforts.

Is you must not feed the troll. Is proof this to be work on RHEL based
machines as SL is more Redhat than CentOS. Is like OpenBSD: OpenBSD is
only NetBSD minus the backdoor in IPSEC

[musntlive@...da ~]$ id
uid=500(musntlive) gid=500(musntlive) groups=500(musntlive)
[musntlive@...da ~]# gcc -o hakaruski fullnullson.c && ./hakaruski ; id ; whoami
[*] Failed to open file descriptors.
uid=0(root) gid=0(root)
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),1337(hakaruskis)
root
[musntlive@...da ~]#

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/