Quotes of the week
[Posted November 10, 2010 by corbet]
And please also don't top-post. Being the antisocial egomaniacs we
are, people on lkml prefer to dissect the messages we're replying
to, insert insulting comments right where they would be most
effective and remove the passages which can't yield effective
insults.
--
Tejun Heo
You've done it. After hours of gdb and caffeine, you've finally
got a shell on your target's server. Maybe next time they will
think twice about running MyFirstCompSciProjectFTPD on a production
machine. As you take another sip of Mountain Dew and pick some of
the cheetos out of your beard, you begin to plan your next move -
it's time to tackle the kernel.
What should be your goal? Privilege escalation? That's
impossible, there's no such thing as a privilege escalation
vulnerability on Linux. Denial of service? What are you, some
kind of script kiddie? No, the answer is obvious. You must read
the uninitialized bytes of the kernel stack, since these bytes
contain all the secrets of the universe and the meaning of life.
--
Dan Rosenberg
(
Log in to post comments)