module

Diamorphine Rootkit Signal Privilege Escalation

Disclosed
2013-11-07
Created
2020-02-19

Description

This module uses Diamorphine rootkit's privesc feature using signal
64 to elevate the privileges of arbitrary processes to UID 0 (root).

This module has been tested successfully with Diamorphine from `master`
branch (2019-10-04) on Linux Mint 19 kernel 4.15.0-20-generic (x64).

Authors

m0nad
bcoles bcoles@gmail.com

Platform

Linux

Architectures

x86, x64

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use exploit/linux/local/diamorphine_rootkit_signal_priv_esc
msf exploit(diamorphine_rootkit_signal_priv_esc) > show targets
...targets...
msf exploit(diamorphine_rootkit_signal_priv_esc) > set TARGET < target-id >
msf exploit(diamorphine_rootkit_signal_priv_esc) > show options
...show and set options...
msf exploit(diamorphine_rootkit_signal_priv_esc) > exploit

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.