DHCP exploitation with DynoRoot (CVE-2018-1111)
This video demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol (DHCP). A rogue DHCP server can craft DHCP offers with a malicious payload that gets executed in a root shell on the victim machine.
The vulnerability is credited to Felix Wilhelm and is known as CVE-2018-1111 or "DynoRoot".
Felix: / _fel1x
CVE: https://access.redhat.com/security/vu...
Project: https://baldassarrefe.github.io/FEP33...