3 ms·
what the blog says and what the code does are two different things. For all I know the blog itself is a honey pot. I need to know what the code does before I r
by akdev1l 5mo ago
what the blog says and what the code does are two different things.
For all I know the blog itself is a honey pot. I need to know what the code does before I run it.
- asdfaoeu 5mo agoWhile your at it you can enter your credit card details to see if they've been leaked.
- john_strinlai 5mo ago>I need to know what the code does before I run it. its literally code meant to exploit your system. you should be running it in an environment built for that already. you dont test exploit pocs on your daily driver.
- akdev1l 5mo ago> you dont test exploit pocs on your daily driver. Do you just like making fake points and pretending other people said them?
- john_strinlai 5mo agogo ahead and explain your point, rather than be cryptic, if you you want to have an actual conversation about it. you said "I need to know what the code does before I run it.". you know its an LPE. the mechanisms of the exploit are fully explained. what more do you need to know? please imagine yourself in the position of the kernel security team who would have received this poc in the first place when you answer, because that is the intended context of the poc. if you think the kernel security team is going to get tripped up over "os as g", you have a crazy low view of the team.