// Compile with: // gcc -pthread dirty.c -o dirty -lcrypt // // Then run the newly create binary by either doing: // "./dirty" // // Afterwards, you can either "su rooter" or "ssh rooter@..." // // DON'T FORGET TO RESTORE YOUR /etc/passwd AFTER RUNNING THE EXPLOIT! // mv /tmp/passwd.bak /etc/passwd // Default Password: Hello@World // 默认添加用户 rooter 密码 Hello@World