Waraxe IT Security Portal

Nial · Advanced user

Hi all.
I got a shell on a server running the 2.6.21.5 kernel. I thought i will have a nice day with the exploit of it running wild on the web, but when compilated and launched, no one is working. The kernel version doesnt seem to be patched. So my question is why doesnt is work? Cant i execute the sploit with my shell on the webserver?

waraxe · Site admin

Local root exploits are not 100% guaranteed to be working. It all depends on specific server environment. Best you can do is to understand how exploit(s) work and then make needed modifications and use debugging methods if needed, so that you can step-by-step analyze, what's happening on target system. If you don't know how specific exploit works and just execute it and then wonder, why it does not work - then you need more knowledge. Read (e-)books and tutorials about Linux kernel internals and C-language and then test all local root exploits against your own test computer (home PC)! It's best way to gain experience and knowledge!!

Nial · Advanced user

I have some knowledge in c and c++ acquired some years ago, but now it is really hard for me to get time to work on that. I will try to understand the exploit i get, but as a first impression, it's like a really hard challenge.
Thx anyway and if you have some advices, i am listening to Wink