Comment

Comment by codethief

> "you have Linux command execution, how do you run native code?"

I was going to ask you what the precise situation is in which you'd apply the ideas from the blog post as I don't know what exactly is meant by "process injection". I think the article would benefit from providing a little bit more background for us non-hackers / non-pentesters. Still, very interesting article – thank you!

PS: The article says

> you need a writable location on disk; this is not always true in e.g. read-only chroots, filesystems, containers, etc

Couldn't you create a temporary file in-memory (e.g. in /dev/shm or in some tmpfs), make it executable (+x) and then execute it?

parent codethief 2 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton