Post #1805563
2026-04-30 11:07 UTC
@sitharus@cloudisland.nz anyways here's a slightly shorter payload that does exactly the same 78daab77f57163626464800126063b0610af82c101cc7760c0040e0c160c301d209a154d16999e07e5c16806010895951961f89f9fd5a3d79603c833fc96651d31939f553f29334fbf388301007f240dab
or even shorter by taking advantage of linux zeroing registers despite this being AFAICT not required: 78daab77f57163626464800126063b0610af82c101cc7760c0040e0c160c301d209a154d16999e07e5c168060108959519c1cfda6b0bd29a650d64ea2765e6e91767300000195c0a70
Replies (2)
-
@gwen@tech.lgbt 2026-04-30 11:12
@sitharus@cloudisland.nz I thought that the setuid syscall should be unnecessary since setuid binaries are executed with the effective user id of the owner so it seems redundant? but apparently not, when I removed that it didn't work anymore if anyone knows why that is I would love an explanation
-
@sitharus@cloudisland.nz 2026-04-30 11:54
@gwen@tech.lgbt Neat! That gets down to 620 bytes with all the extra things I found in Python!