CVE-2018-1049 PoC — systemd 竞争条件问题漏洞

介绍

This Python script is a custom reimplementation of the Metasploit module exploit for CVE-2018-1049, which targets VyOS (Vyatta) via a privilege escalation vulnerability in a Perl script misused through sudo.
You need valid SSH credentials.
You gain root via command injection in a sudo-permitted script.
Even though it targets a local script, the exploit is launched remotely over SSH.
OHCG 2025 - Volt Typhoon!

文件快照

备注