Kernel Bench » redhat

recory pass root tren redhat 9

admin — Thu, 11 Mar 2010 04:21:51 +0000

Duration : 0:5:48

Technorati Tags: 9, pass, recory, redhat, root, tren

Linux 2.6.18+ move_pages() Infoleak Exploit

admin — Thu, 11 Mar 2010 04:21:15 +0000

Quick video of an exploit I wrote for the move_pages() infoleak just submitted to oss-sec (though I had noticed the commit earlier today with SuSE security on CC ). The analysis and exploit development were all completed within an hour. I can leak 512MB of kernel memory around a specific bitmap in the kernel. I demonstrate the leaking of the contents of two sysctl variables in the exploit, as well as the NUMA bitmap.

Source code will be released shortly — it’s a neat little bug, and I like the idea of deducing kernel memory one bit at a time via the return value of the system call

PS: SELinux did nothing to prevent this exploit

Duration : 0:6:30

Technorati Tags: exploit, infoleak, linux, redhat, selinux

Linux 2.X pipe() NULL ptr deref/race local root exploit (RHEL 5.4 x64)

admin — Fri, 06 Nov 2009 18:15:40 +0000

Watch in HD Fullscreen

Back again with yet another linux exploit. For time purposes I’m only demonstrating it on RHEL 5.4, but if you look on my twitter you can see screenshots of it working on every distro mentioned in the video. It’ll work on everything else too, I just don’t have the VMs installed. Every version of Linux I can get my hands on is vulnerable.

Initially the title of this video stated the exploit was SMP-only. That’s not the case — some single-processor systems with PREEMPT enabled are also capable of winning the race, leading to compromise.

Mitigation:
Make sure you have mmap_min_addr enabled on your machines and that it can’t be bypassed. To test if mmap_min_addr can be bypassed or is disabled or not present on your machine, download enlightenment and run ./run_null_exploits.sh You don’t have to choose any particular exploit — it will attempt to mmap at NULL by any means possible and report the success or failure. Unlike with sock_ops there is no workaround for this vulnerability — so it’s time to bite the bullet and upgrade to a kernel that protects against this specific class of bugs in general. Workarounds have never been a long-term solution.

This exploit was written within an hour on October 22nd 2009.

Duration : 0:7:28

Technorati Tags: 0day, linux, redhat, root exploit, selinux

Windows Vista & Linux Ubuntu 8.10 Dual Boot!!

admin — Sun, 01 Nov 2009 16:07:19 +0000

Windows Vista & Linux Ubuntu 8.10 Dual Boot!!
this is done on a hp pavillion 9500 series desktop pc. quad core processor with 2gb graphics and 4 gb of ram..
this linux ubuntu includes compiz fusion!!!!

Duration : 0:8:30

Technorati Tags: 8.10, 9500, ashish, boot, compiz, Desktop, Dual, fast, fusion, gb, graphics, home, hp, kernel, linux, longhorn, microsoft, muscat, OFFICE, oman, pavillion, premium, ram, redhat, series, Ubuntu, ultimate, Vista, Windows

ARCH LINUX – REVIEW -

admin — Wed, 28 Oct 2009 02:02:34 +0000

IT TOOK A BUNCH OF MEXICANS TO FIX ARCH LINUX…….

Duration : 0:8:8

Technorati Tags: 9.10, arch, boot, compatible, Core, debian, fast, Fedora, firefox, gentoo, kernel, kubuntu, linux, microsoft, mirosuck, noobs, PACMAN, RCH, redhat, speed, sucks, sudo, susse, test, Ubuntu, Vista, Windows

Top 5 Ways to Help Linux Virgins Make the Switch

admin — Sun, 04 Oct 2009 04:49:19 +0000

Thanks for all the support! Meet other Linux Haxors @ http://www.linuxhaxor.net Since almost all of people wanting to switch to Linux are coming from Windows, we need to find a way to make it more easy for them to do so. Here’s 5 ways we can do that.

5. Increased Support Teams for Windows Users

4. Having it “Just Work” without Complication

3. Beef Up Development of Distributions of “Windows Look & Feel”

2. Assimilate Windows Users with Focused Help Guides

1. GUI Option Available for All CLI Tasks

Duration : 0:3:7

Technorati Tags: 101, bash, beginner, chick, cli, client, Command, commands, computer, config, developer, distributions, forum, forums, Free, girl, girls, graphical, grub, gui, gutsy, hardware, hax, haxor, howto, Interface, kernel, kubuntu, line, linux, newbies, open, OS, redhat, run, source, sucks, support, To, Ubuntu, ubuntuforums, ubuntuforums.org, Unix, video, virgin, window, Windows

Top 5 Ways to Help Linux Virgins Make the Switch

admin — Sun, 04 Oct 2009 04:49:19 +0000

5. Increased Support Teams for Windows Users

4. Having it “Just Work” without Complication

3. Beef Up Development of Distributions of “Windows Look & Feel”

2. Assimilate Windows Users with Focused Help Guides

1. GUI Option Available for All CLI Tasks

Duration : 0:3:7

RHEL5 2.6.18-157 Local Kernel Exploit 0day, disables SELinux

admin — Mon, 21 Sep 2009 23:18:45 +0000

Same exploit as the previous two videos, this time on a new target: RHEL5 2.6.18-157
Same destruction commences

Ah I forgot to show in the video after I got root that SELinux was still reporting being in enforcing mode, since the same code that faked that information for 2.6.30 worked fine with the 2.6.18.

I had to remove some part of me typing near the very end so that the video could fit in the 10min restriction, nothing before that was edited.

Duration : 0:9:59

Technorati Tags: 0day, enterprise, exploit, kernel, linux, redhat, rhel, selinux