zlacker

[parent] [thread] 1 comments
1. setham+(OP)[view] [source] 2018-07-30 00:57:09
Hm. I tried and it does not seem to work. You can view my attempt at https://github.com/sethgrid/exploit. Chances are that I am ignorant of something. If someone knows what am doing wrong, please let me know!

The code starts to send chunked data and polls for a return curl call from the downloaded script. If the script's curl call calls home, the download will chunk out "bad" bash.

What I see happening is the downloaded script does not fully run until fully downloaded.

replies(1): >>setham+qa
2. setham+qa[view] [source] 2018-07-30 04:13:15
>>setham+(OP)
Help from /r/golang: I needed to still fill the TCP buffer!
[go to top]