Learning about nss (Linux Name Service Switch) During Sudo Exploitation | Ep. 14

แชร์
ฝัง
  • เผยแพร่เมื่อ 27 ส.ค. 2024

ความคิดเห็น • 55

  • @cbruegg
    @cbruegg 2 ปีที่แล้ว +131

    I love how there's a dedicated explanation of the function name "setspent". I wish C devs would stop using unnecessarily short identifiers.

    • @3iggystheorem232
      @3iggystheorem232 2 ปีที่แล้ว +34

      Or just use the shift key

    • @dumonu
      @dumonu 2 ปีที่แล้ว +18

      I agree that the naming convention for this family of functions is badly designed. However, I personally prefer more abbreviated names over absurdly long names. I am a C programmer, so I guess take that with a grain of salt. But it's nice to have the most commonly used functions with the shorter names.
      For an additional reason that libc functions specifically have short names, my memory is that some pre-ANSI C versions considered two identifiers the same if they started with the same 8 characters, so libc functions needed to keep their names small enough to satisfy that constraint.

    • @3iggystheorem232
      @3iggystheorem232 2 ปีที่แล้ว +5

      @@dumonu I am also a c programmer but im not too proud to use nicer cases

    • @danieladelodun9547
      @danieladelodun9547 2 ปีที่แล้ว +7

      @@dumonu Point 2 is valid, but I think if you want your functions to have shorter names, you should redefine it yourself.
      A library shouldn't assume what abbreviations make sense. it's a little annoying that 'spwd' (the name of the struct) and 'sp' (in the function) are both used for abbreviations of ShadowPassword
      Edit: And I really think the function should just be called 'GetShadowPasswordEntry'
      It takes just one line to redefine and we can have informal agreed upon shortings (import numpy as np)

    • @ilonachan
      @ilonachan 2 ปีที่แล้ว +5

      @@kreuner11 I think uppercase letters existed in 197X

  • @hyperboy9672
    @hyperboy9672 2 ปีที่แล้ว +11

    One of the best of best youtubers

    • @MarzJonp
      @MarzJonp 2 ปีที่แล้ว

      I see why.
      He has a real teachers mentality

  • @DeepakSingh-il3ej
    @DeepakSingh-il3ej 2 ปีที่แล้ว +6

    Very informative..... the way you are explaining the codes and function line by line this shows your grip on the subject... thanks for making such videos and keep the knowledge alive!!!

  • @vaisakhkm783
    @vaisakhkm783 2 ปีที่แล้ว +11

    🤣 i was wondering why they called that function set"spend"() since begining...
    5:09.... got me....😂
    Yep it actually make sense...
    As always.. marvelous work.. i wouldn't thoght i would be able to understand any of these in my life.... you made it such fun learning it..🤗 thanks

  • @haise.0
    @haise.0 2 ปีที่แล้ว +9

    I really love your video production, it's quite fantastic and you do a good job of breaking things down in a way that's easier to understand. Coming from someone who's more into networking and servers and such than the actual individual processes and libraries and such running baremetal, at least. It's kind of like taking decompiled binary data and turning it into ASM. It still sucks, but a lot less than it did previously, and at least i can learn things!

  • @TheStiepen
    @TheStiepen 2 ปีที่แล้ว +6

    Small note: libnss does a lot of things including mapping user IDs to usernames, group membership etc. But the one thing it does not do is checking your password. That's actually the job of pam. Having said that, pam works very similar to nss by loading modules at runtime, based on a config file.

  • @-dh
    @-dh 2 ปีที่แล้ว +2

    excited for the next part

  • @MoraFermi
    @MoraFermi 2 ปีที่แล้ว +6

    NSS has been such a wonderful, painful mess for ever. It sure made many a day in my career a more "interesting" one.

  • @michaeldouglas1052
    @michaeldouglas1052 2 ปีที่แล้ว +2

    Amazing!!!

  • @rikschaaf
    @rikschaaf 2 ปีที่แล้ว +3

    Wait, 11 minutes have passed already? It felt like we were only 2 minutes in XD

  • @danielsalloum3006
    @danielsalloum3006 2 ปีที่แล้ว

    Got me hooked

  • @MrSebLD
    @MrSebLD 2 ปีที่แล้ว

    Amazing walkthrough.
    Thank you.

  • @kevinwydler7305
    @kevinwydler7305 ปีที่แล้ว

    Thank youuuu!!!!

  • @spicybaguette7706
    @spicybaguette7706 2 ปีที่แล้ว +3

    5:25 I'd just like to interject for a moment. What you're referring to as Linux, is in fact, GNU/Linux, or as I've recently taken to calling it, GNU plus Linux.

  • @bradeagle7297
    @bradeagle7297 2 ปีที่แล้ว +1

    You should do a video on dirtycow! its a sudo exploit.

    • @lacno29
      @lacno29 2 ปีที่แล้ว +1

      He already did

  • @cotranzbb3535
    @cotranzbb3535 2 ปีที่แล้ว

    Going up and down the caustic in this vid :P

  • @user-ko7oo2qg1g
    @user-ko7oo2qg1g 2 ปีที่แล้ว

    Thank you!

  • @alkove
    @alkove 2 ปีที่แล้ว

    Nice video, as always! For an explanation on setXXent getXXent nomenclature : man getent

  • @jamess1787
    @jamess1787 2 ปีที่แล้ว

    If there's a god, you're doing his work.
    I'm also thankful you're not deep in the bushes burning witches. 🔥 🧙

  • @infelicitatis
    @infelicitatis 2 ปีที่แล้ว

    great video

  • @tg7943
    @tg7943 2 ปีที่แล้ว

    Push!

  • @jacesec6484
    @jacesec6484 2 ปีที่แล้ว

    sorry for noobing around but i can't help but wonder and ask if the "nss ldap" option can be taken advantage of in any way to leverage cve-44228(where vulnerable of course).......also if this is completely dumb please excuse me, i really know anything about this stuff lol😅

  • @locusf2
    @locusf2 2 ปีที่แล้ว +2

    argh ... macros which define a function is a macro and is surrounded by macros ...

  • @amarmohmed1648
    @amarmohmed1648 2 ปีที่แล้ว

    I have the same passion that you had when I was young, and more than that, I saw THE last video and I did not understand anything, so I saw your first video, which is the intro video Please, would you teach me the name of that passion?

  • @simondj8572
    @simondj8572 2 ปีที่แล้ว

    I'm not the expert but why glibc 2.31 when we have much more stable systems there !

  • @TuRnARePlaY
    @TuRnARePlaY 2 ปีที่แล้ว

    Kannst du bitte mal ein Video darüber machen wiediese ganzen Call of Duty Unlock All Tools funktionieren?
    Ich finde dazu leider nirgends Infos drüber.

  • @rogo7330
    @rogo7330 2 ปีที่แล้ว +1

    Damn, that all is possible just because you don't check if provided string ended...

  • @FUTUREPES
    @FUTUREPES 2 ปีที่แล้ว

    💝💝🔥🔥

  • @infelicitatis
    @infelicitatis 2 ปีที่แล้ว

    also algorithm comment

  • @mrlithium69
    @mrlithium69 2 ปีที่แล้ว +1

    I always had a bad feeling about NSswitch

  • @anion21
    @anion21 2 ปีที่แล้ว

    Mich wundert in diesem Programmcode mittlerweile echt gar nichts mehr... Wobei, doch, eins: Mich wundert, dass es meistens scheinbar tatsächlich funktioniert.

  • @lisateh7404
    @lisateh7404 2 ปีที่แล้ว

    Do you know that BTC are being in Wallet ETH smart contract ...Check out this token wallet address

  • @centreonbot8757
    @centreonbot8757 2 ปีที่แล้ว

    Are you mr beast?

  • @thezar86
    @thezar86 2 ปีที่แล้ว

    /////////

  • @Marenthyu
    @Marenthyu 2 ปีที่แล้ว

    This somehow felt WAY shorter than 11 minutes

  • @FalcoGer
    @FalcoGer 2 ปีที่แล้ว

    Someone needs to learn about how to name functions. This is awful. even camel case would've helped here.

  • @eternalnight2675
    @eternalnight2675 2 ปีที่แล้ว

    First

  • @mrrahim5622
    @mrrahim5622 2 ปีที่แล้ว

    2nd

  • @aliobeid
    @aliobeid 2 ปีที่แล้ว +1

    Annoying music

    • @foorack
      @foorack 2 ปีที่แล้ว +8

      ?? There is no background music in this video.

    • @vaisakhkm783
      @vaisakhkm783 2 ปีที่แล้ว +5

      @@foorack 😂it might be a bot

    • @kajaxochi8562
      @kajaxochi8562 2 ปีที่แล้ว +4

      @@vaisakhkm783 Looks like it's a hacked account. The account is old, but they have multiple comments that follow this same pattern so it's probably used as a bot now.

    • @vaisakhkm783
      @vaisakhkm783 2 ปีที่แล้ว

      @@kajaxochi8562 😁yep.... Black markets would have selling bunch off these.....
      Too bad youtube require phone no. To sign up for account, otherwise we could make many account and sell them after 5 years😂