{"action":"closed","issue":{"url":"https://api.github.com/repos/l1048576/short-stories/issues/1","repository_url":"https://api.github.com/repos/l1048576/short-stories","labels_url":"https://api.github.com/repos/l1048576/short-stories/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/l1048576/short-stories/issues/1/comments","events_url":"https://api.github.com/repos/l1048576/short-stories/issues/1/events","html_url":"https://github.com/l1048576/short-stories/issues/1","id":172950264,"number":1,"title":"『妹エクスプロイト』内、リモートエクスプロイトの解説について","user":{"login":"l1048576","id":1246590,"avatar_url":"https://avatars.githubusercontent.com/u/1246590?v=3","gravatar_id":"","url":"https://api.github.com/users/l1048576","html_url":"https://github.com/l1048576","followers_url":"https://api.github.com/users/l1048576/followers","following_url":"https://api.github.com/users/l1048576/following{/other_user}","gists_url":"https://api.github.com/users/l1048576/gists{/gist_id}","starred_url":"https://api.github.com/users/l1048576/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/l1048576/subscriptions","organizations_url":"https://api.github.com/users/l1048576/orgs","repos_url":"https://api.github.com/users/l1048576/repos","events_url":"https://api.github.com/users/l1048576/events{/privacy}","received_events_url":"https://api.github.com/users/l1048576/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/l1048576/short-stories/labels/bug","name":"bug","color":"ee0701"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-24T13:22:51Z","updated_at":"2016-08-24T13:24:32Z","closed_at":"2016-08-24T13:24:32Z","body":"> そういえば妹エクスプロイトのリモートエクスプロイト、攻撃者のマシンと攻撃対象のマシンが異なるじゃなくて実行マシンと攻撃対象マシンが異なる、だと思う(前者だとsshでログインしてsuidが立ってるバイナリをexploitして権限昇格、みたいなのもリモートになってしまう気がする)\r\nhttps://twitter.com/ymduu/status/768145803617505280\r\n\r\n> sshで入って置いてあるバイナリをうんぬんするのはCTF界隈だとローカル扱い(だった気がする)\r\nhttps://twitter.com/ymduu/status/768146569761730560\r\n\r\n言われてみれば確かにそんな感じがある。\r\n「攻撃プログラムを実行するマシンと攻撃対象のマシンが異なる」みたいな説明にすればいいかな。"}}
{"actor":{"display_login":"l1048576"}}