Skip to content
master
Switch branches/tags
Code

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
Aug 29, 2018

FakePip

Exploit sudoer with /usr/bin/pip install *

How to use

Simply download the setup.py file into remote target and execute this in local folder:

sudo /usr/bin/pip install . --upgrade --force-reinstall

Demonstration

Screenshot

Download the setup.py file into remote target

Screenshot

And execute the following command:

Screenshot

Then we get our shell back!

Screenshot

Author

This code is developed and maintained (if possible) by Andre Marques (@zc00l) Any misuse is not the author responsibility.

About

Pip install exploit package

Resources

Releases

No releases published

Packages

No packages published

Languages