Skip to content

Latest commit

 

History

History
32 lines (28 loc) · 1.25 KB

ubuntu.md

File metadata and controls

32 lines (28 loc) · 1.25 KB

Ubuntu 12.04.2 LTS

3.5.0-23-generic

nmapscan

CVE-2013-2094

  • This C program gives root

Close netcat backdoor

  • sudo netstat -lpt | less to see all tcp listening ports
    • netcat should be listening on port 54, process ID was 996
  • sudo kill -9 996 to kill the netcat listener

Binary privilege escalation

  • dash
    • ls -l /bin/dash shows that dash has setuid bit set
    • sudo chmod u-s /bin/dash to remove setuid
  • mtr
    • ls -l /usr/bin/mtr shows setuid
      • I dont think it ships like this
    • sudo chmod u-s /usr/bin/mtr
  • pt_chown
    • ls -l /usr/lib/pt_chown shows setuid
      • Exploit listed here
    • sudo chmod u-s /usr/lib/pt_chown

Credit Card Data readable to the world

  • EVERY user's home directory has a cc_data.txt file that anyone can read (?? wtf ??)
  • ls -l ~/cc_data.txt to show file permissions
  • sudo find /home -name "*cc_data*" | xargs sudo chmod o-r
    • finds every one of these files and removes read permissions for other accounts
  • Can we just delete them?