tehmoon

package main

import (
  "flag"
  "fmt"
  "os"
)

type Flags struct {
}

tehmoon

extract the whole forked branch from merge commit:

git log @~1..@^2

Get all the tags that contain the commit:

git tag --contain 

tehmoon

This is specific to Alpine using the go apk.

Compiling go binaries in same arch:

go build -buildmode exe -ldflags '-linkmode external -extldflags "-static"' .

Compiling go binaries in other arch:

tehmoon

package main

import (
	"io"
	"os"
	"net/http"
	"net/http/httputil"

	"net"
	"golang.org/x/crypto/ssh/terminal"

tehmoon

package main

import (
  "net/http"
  "fmt"
  "io"
  "os"
  "log"
  "crypto/x509"
  "crypto/x509/pkix"

tehmoon

package main

import (
	"os"
	"os/exec"
  "io"
	"strings"
	"github.com/kr/pty"
)

tehmoon

Format0 introduces format string vulnerabilities.

The vuln relies on the fact that user input is not sanitized and can be used as format string fed into the printf family.

In this example sprintf() is used. It takes at least 2 arguments, the destination's string and the source's string. The idea is to do a classic buffer overflow and write 0xdeadbeef to target.

Here's the following exploit:

tehmoon

package main

import (
	"io"
	"syscall"
	"os"
	"errors"
)

func main() {

tehmoon

export WORDCHARS='*?_[]~=&;!#$%^(){}'
setopt HIST_IGNORE_SPACE

tehmoon

package main

import (
	"encoding/json"
	"os"
	"text/template"
)

var data = map[string]interface{}{
	"blih": true,