All Projects → evait-security → ClickNRoot

evait-security / ClickNRoot

Licence: other
This is a small script to make the local exploitation process easier. It downloads the precompiled exploit for x86 and x64 architectures and can also automatic compile local on the target system

Programming Languages

c
50402 projects - #5 most used programming language
shell
77523 projects
python
139335 projects - #7 most used programming language

click_n_root - Linux Local Root Exploiter

This is a small script to make the local exploitation process easier. It downloads the precompiled exploit for x86 and x64 architectures and can also automatic compile local on the target system

Exploit-List:

  1. DirtyCOW AddUser (Ubuntu <4.4/<3.13; Debian <4.7.8)
  2. DirtyCOW Pokeball (Linux Kernel 2.6.22 < 3.9)
  3. Mempodipper (Linux 2.6.39<3.2.2 Gentoo/Debian)
  4. Full Nelson (Linux 2.6.31<2.6.37 RedHat/Debiab)
  5. Half Nelson (Linux Kernel 2.6.0<2.6.36.2)
  6. Clown NewUser (Linux 3.0<3.3.5)
  7. fasync_helper (Linux Kernel <2.6.28)
  8. overlayfs (Linux 3.13.0<3.19)
  9. pipe.c root(kit?) (Kernel 2.6.x (32 Bit only!))
  10. PERF_EVENTS (Kernel 2.6.32-3.8.10)
  11. CAN BCM Exploit (Kernel <2.6.36)
  12. Cups local Exploit (Cups <1.1.17)

How to use it:

  1. Download from git
  2. Start easy Webserver with "sudo ./server.py"
  3. Now a Webserver is open on your local ip on port 80, serving all files given in the clickNroot folder.
  4. Upload the click_n_root.sh -Script to the target linux machine
  5. Give executable rights to the click_n_root -Script (chmod 755 KlickAndRoot.sh)
  6. Execute the script with given Server and Folder and choose an option/exploit
  7. E.g.: ./click_n_root 192.168.0.200/click_n_root

Feel free to modify the script to your needs.

Cheers!

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].