4 ms·
were you able to install this without using sudo?
by biorach 4y ago
were you able to install this without using sudo?
- blueflow 4y agoIn the contest you had root access for a limited amount of time, but you can also do it via a user unit.
- Xylakant 4y agoBut then you should only get the users account as shell, so while this is a neat trick, being able to gain persistent root if you are already root is not that hard.
- blueflow 4y agoIt was part of the contest that your enemy team is not able to detect and remove your backdoor. The obscurity of systemd sockets was my winning move.
- wmrtynhber 4y agosystemd doesn't bind to random ports without being told to. if the blue team didn't stop and say "why is anything listening on port %d", they're a trash blue team.
- xorcist 4y agoClearly you have not used systemd and friends much. It is an ecosystem of daemons that does a lot of things, some of which are guaranteed to surprise you. The specifics of which will vary between releases. I could easily see some random systemd utility binding a non standard port without anyone taking notice.
- rainbow29822 4y agoThat would be the distro's problem, not systemd. Any of those utilities are going to be optional, the distro has to consciously enable them and ship them in a package for it to make it to you at all. A lot of commenters seem to misunderstand that systemd is not forcing distros to do anything. All they really do is provide a set of tools for distro maintainers to choose from.