3 ms·
2:56:45 AM Elliot : then I used the method detailed by turby 2:56:46 AM Elliot : to gain root Has anything been said about what this method was?
by getsat 16y ago
2:56:45 AM Elliot : then I used the method detailed by turby
2:56:46 AM Elliot : to gain root
Has anything been said about what this method was?
- nbpoole 16y agoIf it's what was on the PHP Fog Sucks website, it worked something like this (I may be misremembering a step): 1. Use the post-deploy hook to chmod /home/ubuntu/.ssh so that it could be written to. 2. Upload a PHP shell, use it to write your public key into /home/ubuntu/.ssh/authorized_keys, and get the public IP of the EC2 instance. 3. SSH into the box, sudo su will get you root.
- getsat 16y agoOk, thanks. I was wondering if there was some other root exploit at play, not just bad system configuration.