+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: The Lounge (https://sinister.li/Forum-The-Lounge)
+---- Forum: Random Discussion (https://sinister.li/Forum-Random-Discussion)
+---- Thread: *nix priv esc. (/Thread-nix-priv-esc)
*nix priv esc. - Sale0 - 11-30-2013
Does anyone know where I can read about *nix priv escalating using LD_Preload? I've heard of this method, and I'm wondering where I can read up on it, but, I can't seem to find much about it.
RE: *nix priv esc. - w00t - 11-30-2013
It's basically DLL injecting, but for linux. The only way I can think of escalating with it would be loading a library that spawns a shell into a setuid executable.
RE: *nix priv esc. - Sale0 - 11-30-2013
(11-30-2013, 05:57 PM)w00t Wrote: It's basically DLL injecting, but for linux. The only way I can think of escalating with it would be loading a library that spawns a shell into a setuid executable.
Is there any place I can read up on this more indepth? I appreciate your response.
RE: *nix priv esc. - w00t - 11-30-2013
http://www.codeproject.com/Articles/33340/Code-Injection-into-Running-Linux-Application
Doesn't use ld preload, but the idea is very similar.
RE: *nix priv esc. - Sale0 - 11-30-2013
(11-30-2013, 06:10 PM)w00t Wrote: http://www.codeproject.com/Articles/33340/Code-Injection-into-Running-Linux-Application
Doesn't use ld preload, but the idea is very similar.
Thanks for the link w00t.