CVE-2017-0358

This exploit leverages a vulnerability in ntfs-3g's setuid binary to execute modprobe with attacker-controlled environment variables, leading to arbitrary kernel module loading and local privilege escalation. The exploit works by exhausting file descriptors to trigger a fallback to modprobe execution.

This exploit leverages CVE-2017-0358 to achieve local privilege escalation (LPE) by exploiting a vulnerability in ntfs-3g. It creates a malicious kernel module that, when loaded, spawns a root shell and copies a setuid shell to /tmp/r00t.

This repository contains a functional exploit for CVE-2017-0358, a local privilege escalation vulnerability in ntfs-3g. The exploit leverages a kernel module to escalate privileges to root by manipulating symlinks and executing a shell with elevated permissions.

This Metasploit module exploits CVE-2017-0358, a local privilege escalation vulnerability in ntfs-3g on Debian/Ubuntu systems. It abuses improper environment sanitization in the mount helper to load a malicious kernel module, granting root privileges.