logrotten
Exploits a logrotate race condition to run as root.
An exploit that abuses a logrotate race condition. If a user-writable log is rotated with root privileges, it allows running a payload as root at rotation time.
Family Privilege escalation
Flags -p ./payload <logfile>
Concepts Logrotate abuse (logrotten)
Installation
git clone https://github.com/whotwagner/logrotten
gcc logrotten.c -o logrottenUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- BookHackTheBox