RHEL5 2.6.18-157 Local Kernel Exploit 0day, disables SELinux

Same exploit as the previous two videos, this time on a new target: RHEL5 2.6.18-157
Same destruction commences ;)

Ah I forgot to show in the video after I got root that SELinux was still reporting being in enforcing mode, since the same code that faked that information for 2.6.30 worked fine with the 2.6.18.

I had to remove some part of me typing near the very end so that the video could fit in the 10min restriction, nothing before that was edited.

Category:

Comedy

Tags:

• linux
• kernel
• 0day
• exploit
• redhat
• enterprise
• rhel
• selinux

[slicksterdave]

Holy Crap!

Amazing Exploit... I've been reading j0r code trying to understand it a little more... that's gotta be the coolest exploit I've seen in years. I like the hint you left at the beginning :P

Apologies for dragging the attention yet again away from the exploit, but what station is that? xD

[spendergrsec]

di , fm

[kinggencha]

"You know what's even better than typewriter effects on text? Actually capturing a video of you typing!! People love to watch me type!!!"

[spendergrsec]

it's true, this is web 2.0 real-time entertainment

[bazzoola]

nice work. What's the name of this music track?

[spendergrsec]

No idea. It was whatever psytrance that was playing on the radio at the time ;)

[KernelLinux1979]

Art! :)

[bmw739]

Where's the source code?

[l4vey]

stop killing bugs you moron