On Ubuntu I had to uninstall openbsd's version of netcat and use traditional netcat because openbsd's version (Ubuntu's by default I think) doesn't have the -e switch. It's probably like this in a lot of distros now for security reasons. Run make and put the .so in your plugins directory, then restart GKrellM and then enable the plugin, once the plugin is enabled, click to go configure it and GKrellM should crash, dropping a shell at port 6666. If a user was tricked by an attacker into using a malicious plugin of this type, the system could be compromised.
Attachment:
gkrellm2-plugin-PoC.tar.gz
Description: GNU Zip compressed data
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/