corsix explanation of the bug is here: https://gist.github.com/corsix/6575486 https://gist.github.com/corsix/6575486 it is a very good write up. it was not too

corsix explanation of the bug is here: https://gist.github.com/corsix/6575486 https://gist.github.com/corsix/6575486 it is a very good write up. it was not too difficult to convert it to 64 bit. i'm fairly sure the demo page on the lua website is vulnerable: http://www.lua.org/demo.html http://www.lua.org/demo.html but lua-5.3 is a little different fro lua-5.1 so i don't have a working exploit for this. but they let you load bytecode.