Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VIM RCE via crafted textfile #11973

Open
sempervictus opened this issue Jun 12, 2019 · 7 comments
Labels

Comments

@sempervictus
Copy link
Contributor

@sempervictus sempervictus commented Jun 12, 2019

Everyone knows those "swears by vim and only vim" coders. https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md might make them swear more.

@h00die

This comment has been minimized.

Copy link
Contributor

@h00die h00die commented Jun 12, 2019

Looks like a trivial rce!

@wvu-r7

This comment has been minimized.

Copy link
Contributor

@wvu-r7 wvu-r7 commented Jun 12, 2019

I asked @busterb if he wanted to do this, since he was already looking at it.

@OJ

This comment has been minimized.

Copy link
Contributor

@OJ OJ commented Jun 12, 2019

I've tried to repro this on so many installs, and none of them worked out of the box.

@wvu-r7

This comment has been minimized.

Copy link
Contributor

@wvu-r7 wvu-r7 commented Jun 12, 2019

That's a good data point. Thank you!

@wvu-r7

This comment has been minimized.

Copy link
Contributor

@wvu-r7 wvu-r7 commented Jun 12, 2019

wvu@kharak:~$ grep nomodeline .vimrc*
.vimrc.after:set nomodeline
.vimrc.orig:set nomodeline
wvu@kharak:~$
@philmenow

This comment has been minimized.

Copy link

@philmenow philmenow commented Jun 26, 2019

I've been trying to get my phone rooted for some time now.when I do I'm going to learn so I can show other's.

@wvu-r7

This comment has been minimized.

Copy link
Contributor

@wvu-r7 wvu-r7 commented Jun 26, 2019

Are you going to write a video in Vim?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
5 participants
You can’t perform that action at this time.