Arch Linux

Copied

Banned

Registered: 2019-02-08

Posts: 1

How to run this systemd audit script on arch?

Script: exploit.delivery/systemd_journald_exploit_no_aslr.py
To start it, you need to disable ASLR and therefore I launch it like this: setarch `uname -m` -R ./systemd_journald_exploit_no_aslr.py
It takes 2 seconds and the script goes with code 0, I don’t get root access to the system. What to do????

Last edited by Copied (2019-02-08 05:59:29)

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 20,715

Re: How to run this systemd audit script on arch?

There are a couple constants in there that define the location of libc and the stack that claim they need to be set on a per system basis.  Have you tried to set them for your system?
This won't work with ASLR; why is it you think that command you presented will turn off ASLR?  It seems to be that would have to be a boot option.

You call this an 'Audit'.  Is the point of this to check as to whether this exploit exists? Or this or this?

Edit:  I liked this quote from the author:
"We are also considering providing a full ASLR bypass, but are weighing whether we are lowering the bar too much for the kiddies," Gregory added.

Last edited by ewaller (2019-02-08 16:07:58)

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way