3 ms·
Among other nice things, I liked > We used our C2 repository to execute the pwd && ls && /home && ip a command on the runner labeled “jenkins-worker-rocm-amd-3
by CoolCold 3y ago
Among other nice things, I liked
> We used our C2 repository to execute the pwd && ls && /home && ip a command on the runner labeled “jenkins-worker-rocm-amd-34”, confirming stable C2 and remote code execution. We also ran sudo -l to confirm we had root access.
While it's not clear was it curated list of commands or just ALL, I assume the latter and that makes me feel no system administrator was involved into that pipelines setup - those guys are quite allergic to giving sudo/root access at all
- guappa 3y agoModern python development has become very similar to js… just install a few hundreds dependencies and hope for the best. I'm personally sticking to distributions, and use pip just for testing. But I'm an outlier.