Skip to content

fix typos #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions mobileiron0day.txt
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ miadmin 13353 0.0 0.0 63856 1388 pts/1 S+ 14:45 0:00 /bin/bash /mi/b
root 13399 0.0 0.0 104096 2144 pts/1 S+ 14:45 0:00 /usr/bin/sudo /usr/bin/less mylnk
root 13400 0.0 0.0 63600 1024 pts/1 S+ 14:45 0:00 /usr/bin/less mylnk

The above command can be triggered from the miadmin user with the "show log" functoinality,
The above command can be triggered from the miadmin user with the "show log" functionality,
as "/usr/bin/less" is then called with root privileges it is possible to quickly elevate
privileges to root using !sh as seen in the example here:

Expand All @@ -41,7 +41,7 @@ [email protected]>
As less supports the ability of executing arbitrary commands and piping input it is trivial to
gain arbitrary command execution by using pipe with the current file "|m." which will change the
less prompt to "!" indicating which program to pipe to and then typing /bin/sh -c "CMD YOU WANT"
to be able to execute arbitrary commands with root privileges. You will recieve the command
to be able to execute arbitrary commands with root privileges. You will receive the command
output.

--log 'mi.log' --
Expand Down