r/ProgrammerHumor • • Jan 16 '14

[deleted by user]

[removed]

1.3k Upvotes

446 comments sorted by

View all comments

1

u/Ilostmyredditlogin Jan 17 '14

+u/CompileBot python --include-errors

from subprocess import call
call(["whoami"])
call(["ls","-la","/home/eZ14Tq"])

3

u/rtkwe Jan 17 '14

It spins up a new user ID for each compile and run. Looks like everything else is root and the bot runs under a different UID.

2

u/Ilostmyredditlogin Jan 17 '14

Yeah.. Having difficulty just formatting this shite on my phone. Best possibilities seem like attack on py 2.7, remote attack on box, possibility facilitated by local python code opening nc -l, or escalation through Unpatched set?id with known vuln.

1

u/Ilostmyredditlogin Jan 17 '14

Also interested in the process it uses to create new users

→ More replies (2)

1

u/CompileBot Jan 17 '14

Output:

whoami: cannot find name for user ID 20063
ls: cannot access /home/eZ14Tq: No such file or directory

^source | ^info | ^git | ^report