3 ms·
>www-data should be set to noshell 99% of the time. Huh? execve(2), of course, lets to execute arbitrary files. No need to spawn a tty at all. https://swisskyr
by mmsc 2y ago
>www-data should be set to noshell 99% of the time.
Huh? execve(2), of course, lets to execute arbitrary files. No need to spawn a tty at all. https://swisskyrepo.github.io/InternalAllTheThings/cheatsheets/shell-reverse-cheatsheet/ https://swisskyrepo.github.io/InternalAllTheThings/cheatshee...
>This is all that would be relevant, and this is also very rare.
Huh? Exploiting an unpatched vulnerability on a server to get access to a user account is.. very rare? That's exactly what lateral movement is about.
- DEADMINCE 2y agoInstead of taking the time to reply 'huh' multiple times, you should make sure you read what you're replying to. For example: > Huh? Exploiting an unpatched vulnerability on a server to get access to a user account is.. very rare? The 'this' I refer to is very clearly not what you've decided to map it to here. The 'this' I refer to, if you follow the comment chain, refers to a subset of something you said which was relevant to your point - the rest was not.