y‘nìzUNIX•¶ŒÉ@•¶‹ƒnƒbƒJ[yƒpƒNƒŠz (762Ú½)
㉺‘OŽŸ1-V
38(1): –¼–³‚µ‚³‚ñ—‚¨• ‚¢‚Á‚Ï‚¢B [] 02/07/14 17:47 AAS
$ find / -user root -perm -4000 > aaa
$ less aaa
/usr/bin/passwd
...i—ª
/usr/bin/.rootshell
$
u‚ÓBŽ„‚ÌŸ—˜‚¾Bv
$ /usr/bin/.rootshell
$
u‚ñHv
$ id
uid=13214(hoge) gid=513(hogehoge)
$
u‚É‚åHv
$ file /usr/bin/.rootshell
/usr/bin/.rootshell: shell script text executable
u‚Ò‚æHv
$ cat /usr/bin/.rootshell
#!/bin/sh
# Fucking! Suck your mother!
finger > /tmp/tmptmptmp
mail admin@siraneeyo.ne.jp < /tmp/tmptmptmp
rm /tmp/tmptmptmp
$
㉺‘OŽŸ1-V‘ŠÖŽÊ”——õÝžx—ð
‚ ‚Æ 724 Ú½‚ ‚è‚Ü‚·
½Úî•ñ ÔÚ½’Šo ‰æ‘œÚ½’Šo —ð‚Ì–¢“Ç½Ú AA»ÑȲÙ
‚Ê‚±‚ÌŽè ‚Ê‚±TOP 0.012s