Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: Dave Aitel (daveimmunityinc.com)
Date: Wed Apr 17 2013 - 10:31:31 CDT
So reading the above blog is amusing for many reasons. But it did make a
lot of people sit around looking at the funniest games you could play on
modern Linux. For example, Linux Hangman.
Linux Hangman Rules
You take turns putting setuid root onto files in /usr/bin /usr/sbin/,
etc. and if your opponent can use that to get root, even via a
convoluted scenario, then you lose. The goal is to create a system
running with MAXIMUM PRIVILEGE.
So for example, the first person usually setuid's /bin/true :>
Another good game is "Most convoluted way to get root via setuid gdb" -
but these results tend to be more subjective, and better after drinks.
Oddly enough, today is Linux Kernel Exploit Day at the INFILTRATE Master
Class. So at least everyone's head is in the same space! :>
Dailydave mailing list
- application/pgp-signature attachment: OpenPGP digital signature