Linux Shared Object Files - Shibboleth Beyond Root [HackTheBox]
Reversing a msfvenon generated elf shared object, writing a elf .so file, and then reversing it as well. All within the context of CVE-2021-27928 as used on the Shibboleth box.
Full Shibboleth Post: https://0xdf.gitlab.io/2022/04/02/htb...
[00:00] Intro
[01:16] so file, generating with msfvenom and reversing with Ghidra
[05:04] Identifying SYSCALLs to understand what's happening
[07:40] Writing my own shared object with a constructor and simple id to file payload
[13:45] Testing first so payload on Shibboleth
[15:34] Updating payload to set permissions so I can read the output
[16:49] Updating payload to create a SUID bash
[18:20] Looking at my shared object in Ghidra
[19:40] Summary