upvote
It's patching the binary in memory, so the binary patch would be architecture dependent. The existing one is only x86_64, but with an updated payload, it would work on arm.
reply
this is because the `su` binary is replaced with x86 shellcode, replace it with aarch64 and it will work just the same.
reply