| Website | https://ashald.net |
| Website | https://ashald.net |
once you have mastery, you can half ass things correctly, because you know which half of the ass you need
lol https://seclists.org/oss-sec/2026/q1/89
telnetd server invokes /usr/bin/login (normally running as root) passing the value of the USER environment variable received from the client as the last parameter.
If the client supply a carefully crafted USER environment value being the string "-f root", and passes the telnet(1) -a or --login parameter to send this USER environment to the server, the client will be automatically logged in as root bypassing normal authentication processes
In telnetd for a decade 💀
The video here is harrowing, but the woman refusing entry to ICE gets stronger and stronger throughout. She also exercises her rights with skill and knowledge, doing so precisely as she should have. Every American should watch.
https://www.reddit.com/r/minnesota/comments/1q8vvwa/st_paul_mn_a_sobbing_resident_calls_911_as/