search

jondonas / linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester
GNU General Public License v2.0
1.86k stars 298 forks source link

-d comman not working why? #2

Closed rasimakgun closed 5 years ago

rasimakgun commented 5 years ago

hi guys

./linux-exploit-suggester.pl -d

Select exploits to download: a

result not download.

can you help me pls?

jondonas commented 5 years ago

Can you post the full output when running the script?

rasimakgun commented 5 years ago

suggester2_notdownload

jondonas commented 5 years ago

Ah, I see. So the second time, you are running without -k 4. This makes the script check against the local kernel. And the local kernel of 4.19.0 doesn’t actually have any matching exploits!

Try running -k 4 -d and you will be able to download the exploits (this would give you all the exploits for 4.x.x)

I will update the output to make it clearer what is happening in your case. Thanks!

rasimakgun commented 5 years ago

it worked thank you. Then how do i proceed with the source code i downloadd?

jondonas commented 5 years ago

Depends on what you’re trying to do. A lot of the code you download from exploitDB will require slight modifications to get it working (eg. a stack overflow might require you to modify the pointer addresses). Then you’ll need to either compile and run the code or use the right interpreter.

If you’re studying for the OSCP or something similar, part of the challenge is getting the exploits to work. You can find tutorials online but steps 2-5 from this tutorial are a good starting point.