#greyscript — Public Fediverse posts

So, i wrote a local vuln scanner in #greyhack using #greyscript. Problem is that it needs a delivery mechanism to go out on remote hosts and scan for local vulns (as scanning on my machine just results in one version of each /lib/ file, pretty much pointless).

So i wrote a remote exploiter that uses the already collected remote exploits (+35K of them) to open up a shell, check if it's root, then uploads a bunch of tools, execute them, log all vulns and send them to a collection server i set up ingame (SSH), and when done - wipe all trails including files and logs that i were even on the host at all.

Now - i got close to 40K vulns, including almost 4000 local ones that i can use for privesc whenever i get a lousy guest shell.

The code was very small, but the impact was amazing. Whatever IP i go to in the game, there is always a vulnerability i now can exploit.

Writing a sniffer in #greyscript is quite simple. Captures credentials and sends them off to my email account. #greyhack