The most interesting part of the SME hack is upgrading from a crappy netcat to a full screen session [25:12]. Handy!https://www.youtube.com/watch?v=oTbI74ti0yY#t=25m12 …
-
No, it's just a netcat shell. The point is he uses python to spawn a pty, fixes up the local terminal, then gets a screen going.
So he goes from a barebones broken non-interactive shell to a fully working screen session that can run vim.
-
-
And is this a exploit on a live website? Or internal test server?
-
This was a exploit on a live server (blackhat), but the tty trick is unrelated to the exploit and very useful in other contexts.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.