Post #2142668
2026-04-29 22:05 UTC
5. The authors say they have other chains (including ones that allow container escapes). I believe them.
6. A mildly de-minified PoC for Alpine with a new payload ELF is at hackerspace[pl]/~q3k/alpine.py . You'll need /bin/ping from iputils. Tested on an ancient Alpine ISO from my cringe^Wdownloads directory.
Replies (2)
-
@q3k@social.hackerspace.pl 2026-04-29 22:27
Oh yeah the above will turn your /bin/ping into a setuid(0) su until you drop caches (maybe) or reboot. So, uh, keep that in mind.
-
@shiz@mastodon.social 2026-04-29 22:09
@q3k ayy I was wondering about the Alpine suid situation, blacklisted the alg module to be sure, nice job