+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: looking for exploits (/Thread-looking-for-exploits)
looking for exploits - Adorapuff - 08-21-2014
Well, its a lonely thursday and I want to root some boxes
I got my Shodan account ready for scanning and I got a sexy rootkit
Now all I need is the step in the middle, a semi-decent public exploit.
What do you guys like to use when looking for boxes.
RE: looking for exploits - Dyme - 08-22-2014
When I started selling boxes almost a year ago I used CVE-2013-4878, but I assume now that it's incredibly saturated considering everyone was using it. Some more recent shit that the kids have been using include CVE-2013-6955 and the Blackarmor NAS vuln (which I think starshit disclosed on here?). I have something that uses a combination of a public exploit + my own priv9 exploit in case I for some reason need random boxes again, but I really don't see a point.
Spoiler:
![[Image: lEeTzfK.png]](http://i.imgur.com/lEeTzfK.png)
But since you "eat 0days for breakfast" I would just use one in your vast collection.
RE: looking for exploits - Adorapuff - 08-22-2014
(08-22-2014, 04:29 PM)Dyme Wrote: When I started selling boxes almost a year ago I used CVE-2013-4878, but I assume now that it's incredibly saturated considering everyone was using it. Some more recent shit that the kids have been using include CVE-2013-6955 and the Blackarmor NAS vuln (which I think starshit disclosed on here?). I have something that uses a combination of a public exploit + my own priv9 exploit in case I for some reason need random boxes again, but I really don't see a point.
Spoiler:
But since you "eat 0days for breakfast" I would just use one in your vast collection.
I eat 0 day as much as I'm a kernel programmer.