4 ms·
A (somewhat cringeworthy) thread on how to gain persistence via this exploit is at https://github.com/timwr/CVE-2016-5195/issues/9 https://github.com/timwr/CVE-
by voltagex_ 10y ago
A (somewhat cringeworthy) thread on how to gain persistence via this exploit is at https://github.com/timwr/CVE-2016-5195/issues/9 https://github.com/timwr/CVE-2016-5195/issues/9
I think this would be a "temporary root", rather than something like CF-AutoRoot that gains persistence by modifying the system itself.
- cyphar 10y agoIt's painful to read. Only one person in that thread appears to know what SELinux actually does, and nobody has mentioned the fact that SELinux was explicitly designed to make a root privesc contained. The ironic part is that since DirtyCOW is a kernel bug they could probably modify the exploit to disable SELinux from inside the kernel (or load a module that disables SELinux). But they're just trying to use the PoC as the only thing you can get from the exploit.
- digi_owl 10y agoWelcome to the world of phone firmware modding. I suspect you got much the same back in the microcomputer era. Just look at the various phreaker stuff salvaged from BBSs.
- daveloyall 10y agoWell at least these github repos and gists are an improvement beyond "here, download this .apk from megaupload and install it!"