Post #1834666

Disclosure: in some cases, a Linux user can use doas to edit files in /etc/periodic/15min, allowing to execute code as root. I haven't reported this to cron because maintainer's e-mail address was so long I didn't want to type it. lauren@hayasaka ~ $ doas python3 ./turbohack.py lauren@hayasaka ~ $ tail -n2 /tmp/out.txt [+] Executing: whoami root lauren@hayasaka ~ $ md5sum ./turbohack.py 52111e4d5f74be75cca6056ffa640344 ./turbohack.py