EH-Net

Ethical Hacking Discussions and Related Certifications => OSCP - Offensive Security Certified Professional => Topic started by: satish.lx on October 25, 2012, 01:37:13 PM

Title: Glibc dynamic linker exploit
Post by: satish.lx on October 25, 2012, 01:37:13 PM

Hey guys,

I am running following Glibc exploit and it works on few system but some of them my ssh terminal got crash or closed. do you know why?

http://seclists.org/fulldisclosure/2010/Oct/257

Title: Re: Glibc dynamic linker exploit
Post by: ajohnson on October 25, 2012, 02:06:10 PM

Are you trying to use it on other distros/versions than the ones tested (FC13, RHEL5/CentOS5)?

There may be other conditions in those that cause the exploitation attempt to result in a session crash, rather than successful exploitation.

Also, the OffSec guys are notorious for making odd system adjustments. I wouldn't expect one exploit to work across the board (seriously though, what fun would that be? ;)).

Title: Re: Glibc dynamic linker exploit
Post by: satish.lx on October 26, 2012, 09:42:57 AM

I am not running this code on any OSCP lab because i didn't register yet. I am running in homebrew lab.

I have same OS CentOS 5.5 on two machine and it behaving differently, anyway no big deal.. Thanks for reply.

Title: Re: Glibc dynamic linker exploit
Post by: Jamie.R on October 29, 2012, 06:42:39 AM

Yeh agree with ajohnson it will be the OS you testing it again maybe it not using the same version or something similar to that.