[Dailydave] Linux Hangman Rules

[Dave Aitel]

http://blog.ioactive.com/2013/04/can-gdbs-list-source-code-be-used-for.html

So reading the above blog is amusing for many reasons. But it did make a
lot of people sit around looking at the funniest games you could play on
modern Linux. For example, Linux Hangman.

Linux Hangman Rules
You take turns putting setuid root onto files in /usr/bin /usr/sbin/,
etc. and if your opponent can use that to get root, even via a
convoluted scenario, then you lose. The goal is to create a system
running with MAXIMUM PRIVILEGE.

So for example, the first person usually setuid's /bin/true :>

Another good game is "Most convoluted way to get root via setuid gdb" -
but these results tend to be more subjective, and better after drinks.
Oddly enough, today is Linux Kernel Exploit Day at the INFILTRATE Master
Class. So at least everyone's head is in the same space! :>

-dave


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: OpenPGP digital signature
URL: <https://lists.immunityinc.com/pipermail/dailydave/attachments/20130417/b6f4d54e/attachment.sig>