3 ms·

I went to try this, and then realized that I don't have gcc installed on my production (-ish) boxes. Is this sufficient? Can you foresee me needing to install

I went to try this, and then realized that I don't have gcc installed on my production (-ish) boxes. Is this sufficient? Can you foresee me needing to install gcc, and to leave it installed? I.e. should I install it to do whatever compiling I need to do, and then remove it?

zerohp 16y ago
No, it's not sufficient. Assuming an attacker has the ability to run commands as a user on your machine, they could compile the exploit code on a remote host and copy it in.