Linux 2.6.30+ Local Kernel Exploit 0day, disabling SELinux/AppArmor/LSM ;)

Hello to my new vendor-sec visitors! Haven't we learned yet that the kernel can do whatever it wants? Guess not ;)

Once I own the kernel (which SELinux does nothing to prevent), I just destroy everything (SELinux, AppArmor, LSM, auditing, and more!), in honor of the curse of Cheddar Bay! 100% reliable too BTW, you can exploit the same machine as many times as you like.

No alerts, no warnings, and this weekend it will work on x64 too.

Category:

Comedy

Tags:

• exploit
• selinux
• apparmor
• lsm
• linux
• kernel

[xalupeao]

uname -a: Linux localhost 2.6.29.1-server-4mnb #1 SMP Mon Apr 20 17:17:54 EDT 2009 x86_64

... is possible hack whit is exploit?

[spendergrsec]

No, only 2.6.30 and 2.6.30.1 (due to the exploit being released, the issue was fixed in 2.6.30.2)

[int3rl0per]

Jesus. The ultimate cockslap is the fact that you're connected from a Windows Vista box...

[spendergrsec]

Actually that's Windows 7 ;)

[funtimeinternet]

AWESOME.

[spendergrsec]

hehe thanks :) I've been watching your video too much lately ;)

[GBLTeam]

can you give me link ?

[adarqui]

theo de raadt is better than you in every facet of life.

[hcinoubnf]

2.6.27.10-grsec #1 SMP Wed Aug 19 00:37:38 CDT 2009 x86_64 it possible to get root on this kernel ?

[Arkblu]

You don't.

[neurom4nc3r]

have some vulns for this kernel version

[SkitMAS]

This is what I think your saying..

" HURR DURR I LIEK WEB APP VULNERS ME NO NO WTF A BUFFER OVERFLOW IZ DURRR HURR "

[Hayate1993]

How can i get a exploit of a site??

plz tell me!!

THankYOu for helping! =]

[helgesdk]

I think you will only be able to take complete control of your VM.

[solarbunny]

Is it possible to use this for breaking out of openvz container?

[willianm420]

Linux localhost 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 11:57:43 EST 2008 x86_64 x86_64 x86_64 GNU/Linux

... is possible hack whit is exploit?