Joshua Rogers’ Scribbles personal blog
root with a single command: sudo logrotate
Starting from the constraint that only sudo logrotate * may be run, and ending at root: abusing the log file flag to overwrite root owned scripts and ride cron to privilege escalation.
- Points
- 123
- HN comments
- 47
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyInfrastructure & DevOps2023
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Oct 3, 2023 | root with a single command: sudo logrotate by skilled | 123 | 47 |
