or even a web shell

github.com/dirtycow/dirtycow.github.io/wiki/…

yay privilege escalation bugs!

This was linked as how to remove Linux instructions

i lolled

why was there a sledgehammer in that office

Impact

An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on the system.
This flaw allows an attacker with a local system account to modify on-disk binaries, bypassing the standard permission mechanisms that would prevent modification without an appropriate permission set.

unprivileged local user . . . huh

so imagine this.

@KazWolfe good question

You have a nobody user (anonymous web script or a CI or something) or just a guest user.

They can pull this exploit to privilege escalate to whatever they want.

I guess the nobody user is usually set with no shell though

shell = some way of running commands

so for example, i have a webserver where you can upload an arbitrary executable and run it.

you upload a specially-crafted Dirty Cow payload, and you basically pwn my server.

I mean't I don't think you can use the nobody user to do that on a default configuration, because the /etc/passwd file doesn't assign a shell to that user

yay just sold my car...

that was quick

@IanC yeah but you get the point, right?

iwannasleepplz

I felt some mixed feelings on that statement @TheXed

halp

@IanC about selling my car?

wait, cant you run things without a shell?

Isn't that how sudo works?

technically, you don't need shell - a kernel module will suffice

but as humans , we like to interact

ergo , shells

┌─[16:08:45]─[kazwolfe@BlackHawk]
└──> ~ $ sudo -u nobody whoami
nobody
┌─[16:08:50]─[kazwolfe@BlackHawk]
└──> ~ $ cat /etc/passwd | grep nobody
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin

nap i need,else yoda i'll become

Nobody doesn't have a shell, but i can still run things as nobody.

@Serg Nap I need, else become Yoda I will.

@KazWolfe Sure! (sorry, was out to get food)

@KazWolfe I'm not sure, I think you might be using the shell from your user, but with the other user priviledges

but remotely connecting as nobody, not sure if that's possible

You can't remotely connect without a shell or some way to exec.

No shell != no execution

i can still spawn processes owned by users.

@KazWolfe well . . . if you know how to connect to a socket . . .and use execvp command , either in python or C . . . then maybe there's a way

I mean, DirtyCow is relatively low-sev because you need to have an account of some sort.

and some way to arbitrarily execute code.

woot woot just got my yearling badge

zazzle.com/collections/dirty_cow_collection-119587962650451153

oooooh a dirty cow tie

i need 12.

nice only $1,781.00 for the hat

@Zanna why did you edit this but not flag it? askubuntu.com/a/842164/44179

if it were actually priced reasonably i would so buy a shirt.

@KazWolfe the heck with those prices?!

@Seth github.com/dirtycow/dirtycow.github.io/projects

This is why

They give them away for writing an exploit.

30 minutes to get another +30

let's do this!

Ah.

sleeping behind desk is so damn uncomfortable

ahhhhh i need goats

reputation goats

i'm close to cap for today

this is what google gave me for reputation goats

Close to cap not car :P

has anyone used Codecademy before?

Nope.

why do people upgrade to 16.10 ;-;

oh my goat . . . my neck feels like theres two stakes in it, vertically from head to shoulders

haven't slept behind a desk in a while

especially such low ones

hmmmm . . . .

My / is only 120 GB

something ain't right there

@Serg you win...

Woohoo. Java upgrade day.

@TheXed I do ? and what did I win ?

You win having a bigger hard drive...

26 GB. Lol.

gah 10 away

That's not full story here . . .

askubuntu.com/questions/518202/… vtr if anyone's bored pls?

brb need to disconnect

@KazWolfe VTR = vote to reopen?

Vote To Resolve

get it off the unanswered list

Oh, you mean just plain vote :D

Hey does anyone know if the audio is any butter in the 3.5mm audio out then it is on the rpi2

In other words, "vote for my answer!".

:P

or no

is that down vote you are wanting?

i have a real answer :D

@TheXed No idea.

gimme a sec

Why use 3.5mm when I have HDMI...

that was supposed to be rpi 3 vs output on rpi2

@NathanOsman hdma to vga adapter doesn't support audio.

Yuck!

there. 4 minutes.

and repcap <3