*nix priv esc.

Sale0 · 11-30-2013, 04:59 PM

Does anyone know where I can read about *nix priv escalating using LD_Preload? I've heard of this method, and I'm wondering where I can read up on it, but, I can't seem to find much about it.

w00t · 11-30-2013, 05:57 PM

It's basically DLL injecting, but for linux. The only way I can think of escalating with it would be loading a library that spawns a shell into a setuid executable.

Sale0 · 11-30-2013, 06:01 PM

(11-30-2013, 05:57 PM)w00t Wrote: It's basically DLL injecting, but for linux. The only way I can think of escalating with it would be loading a library that spawns a shell into a setuid executable.

Is there any place I can read up on this more indepth? I appreciate your response.

w00t · 11-30-2013, 06:10 PM

http://www.codeproject.com/Articles/3334...pplication

Doesn't use ld preload, but the idea is very similar.

Sale0 · 11-30-2013, 06:51 PM

(11-30-2013, 06:10 PM)w00t Wrote: http://www.codeproject.com/Articles/3334...pplication

Doesn't use ld preload, but the idea is very similar.

Thanks for the link w00t.