Page 2 of 2

Re: BETA: Revue Root (Not for general public use)

Posted: Mon Nov 19, 2012 6:51 am
by cj_000
M1cha wrote:I have another idea for permanent root and I'll try it soon:
We could place a binary somewhere like on /data-partition.
Then set the owner to root and give him the +s flag so it will be always executed as root.

If we do that with a binary like busybox we should be able todo everything as root without exploits.
Good idea, however the Revue auto-mounts /data nosuid, so that bit doesn't take effect. As for sticking it somewhere else, it's the whole signed partition thing again.

Re: BETA: Revue Root (Not for general public use)

Posted: Tue May 14, 2013 12:12 am
by famewolf
Anyone still doing ANYTHING on this or has it been totally abandoned?

Re: BETA: Revue Root (Not for general public use)

Posted: Fri May 17, 2013 6:05 am
by M1cha
hi there is a generic linux root exploit for all kernel versions:
http://m.h-online.com/open/news/item/Ex ... -classic=1
http://fucksheep.org/~sd/warez/semtex.c

Can this work on revue?
I tried it but it fails there:
semtex: /home/m1cha/Downloads/semtex.c:63: main: Assertion `(map = mmap((void*)0x380000000, 0x010000000, 3, 0x32, 0,0)) == (void*)0x380000000' failed

There is a define with the BASE address. I don't know how to fix it.