ldd arbitrary code execution

You're viewing a comment by ivan and its responses.

ivan Permalink
October 26, 2009, 19:33

The uClibc trick is *way* too complicated !

You can specify *any* statically linked ELF module as the interpreter !

So, do a program (say.. fakeld.c) that'll do the nasties.. compile it with :

gcc -static -Wl,-static -static-libgcc fakeld.c -o fakeld.so

Compile it again with :
gcc -Wl,-dynamic-linker,$(pwd)/fakeld.so fakeld.c -o fakeld

--Ivan

Reply to this comment

Reply To This Comment

(why do I need your e-mail?)

(Your twitter name, if you have one. (I'm @pkrumins, btw.))

Comment Help

Type first 3 letters of your name: (just to make sure you're a human)

Please preview the comment before submitting to make sure it's OK.