3 ms·
I think the tricky piece is that you'd need to find that inode number without using any dynamically linked libraries, including ls and cat in the author's case.
by abound 2y ago
I think the tricky piece is that you'd need to find that inode number without using any dynamically linked libraries, including ls and cat in the author's case. And debugfs is likely dynamically linked too (I just checked and it is on my machine)
- ryao 2y agoPresumably, the read shell builtin can be used to read files in /proc. As per the original article, you can get a static version over the network using only bash builtins and overwrite a file with execute permission to be able to execute it.