(06-19-2014, 10:41 PM)Adorapuff Wrote: Do they know that /etc/password is useless without /etc/shadow also why do they claim to be leet yet can't find a local root exploit for a kernel that has serval public vulns. They probably couldn't figure out wget

(06-20-2014, 04:20 AM)Dyme Wrote: While I do agree with you that I am unsure why they even thought to disclose the passwd file, I don't know if I would be so quick to rip on them for not rooting that box. Does that specific kernel have various public vulnerabilities that could lead to root code exec? Yes - but I was unable to find any public PoCs which get code exec for these vulns. While it is possible that they could have made their own, doing such is a pretty difficult task (hence why you can't find anything that's currently public), and I would actually have a lot of respect for them if they could manage to do that. If however I am just failing to correctly use the internet to find a privilege escalation exploit that is applicable for this kernel, please provide it here and I'll put my dick back in my pants.

Don't take this as me defending nullcrew, I just think you're criticizing them for the wrong reasons.

(06-20-2014, 01:13 PM)Adorapuff Wrote: The exact kernel they are running seems to be somewhat custom, but 3.4.73 has several public exploits.

(06-20-2014, 04:20 AM)Dyme Wrote: please provide it here and I'll put my dick back in my pants.