Linux kernel 2.6.11 and below CPL 0 local exploit. Third version/variant of this exploit.
fe97c08a01073659a768232db8f502efSucKIT Rootkit v2.0-devel-rc2. Easy-to-use, Linux-i386 kernel-based rootkit. The code stays in memory through /dev/kmem trick, without help of LKM support nor System.map or such things. Everything is done on the fly. It can hide PIDs, files, tcp/udp/raw sockets and sniff TTYs.
3bb82c1fddcc47456efee6f3687e4f51Local sys_uselib root exploit for the Linux 2.4 and 2.6 kernel series.
61f5fec50d826adbfbbaa9de94068172Sendmail 8.11.5 and below local root exploit. Tested against Red Hat 7.0 and 7.1, SuSE 7.2, and Slackware 8.0.
2208cdd278d3a6de2a4cb062738312daThe SucKIT is easy-to-use, Linux-i386 kernel-based rootkit. The code stays in memory through /dev/kmem trick, without help of LKM support nor System.map or such things. Everything is done on the fly. It can hide PIDs, files, tcp/udp/raw sockets, sniff TTYs. Next, it have integrated TTY shell access (xor+sha1) which can be invoked through any running service on a server. No compiling on target box needed, one binary can work on any of 2.2.x & 2.4.x kernels precompiled (libc-free).
5b947de74ce9ba53023569fe77cae75bSendmail 8.11.5 and below local root exploit.
4a6837286d952f1c05cba8c6fb7c9741