Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LinPeass highlights in yellow only the two final letters at the end of a sudo restriction #425

Open
simonetablo opened this issue May 28, 2024 · 0 comments

Comments

@simonetablo
Copy link

When linpeass performs checks related to sudo allowed commands (sudo -l), it returns the following results:

Matching Defaults entries for user1 on host:
env_reset, mail_badpass, secure_path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin

User user1 may run the following commands on host:
(ALL) /bin/ls /tmp/backup/backup_access
(root) /usr/bin/cat backup_access

The strange thing is that it highlights in yellow (marking as 95% a PE vector) the last two letters (ss) of the directories where the user can execute the listed commands.
Are those real PE vectors or is a bug?

Screenshot_2024-05-28_14-25-50

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant