full-disclosure - PoC Malicious GKrellM2 System Monitor Plugin

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <AANLkTilQbBG0_NtW6qUzlZDc51B5MtzMd4iTep807txP@mail.gmail.com>
Date: Mon, 19 Jul 2010 07:01:02 -0400
From: Marshall Whittaker <marshallwhittaker@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: PoC Malicious GKrellM2 System Monitor Plugin

On Ubuntu I had to uninstall openbsd's version of netcat and use traditional
netcat because openbsd's version (Ubuntu's by default I think) doesn't have
the -e switch.  It's probably like this in a lot of distros now for security
reasons.  Run make and put the .so in your plugins directory, then restart
GKrellM and then enable the plugin, once the plugin is enabled, click to go
configure it and GKrellM should crash, dropping a shell at port 6666.  If a
user was tricked by an attacker into using a malicious plugin of this type,
the system could be compromised.

Content of type "text/html" skipped

Download attachment "gkrellm2-plugin-PoC.tar.gz" of type "application/x-gzip" (50189 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/