{"action":"created","issue":{"url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/6","repository_url":"https://api.github.com/repos/BigNerd95/Chimay-Red","labels_url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/6/labels{/name}","comments_url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/6/comments","events_url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/6/events","html_url":"https://github.com/BigNerd95/Chimay-Red/issues/6","id":286282390,"number":6,"title":"How to exploit it  in real world?","user":{"login":"jinyu00","id":18465642,"avatar_url":"https://avatars2.githubusercontent.com/u/18465642?v=4","gravatar_id":"","url":"https://api.github.com/users/jinyu00","html_url":"https://github.com/jinyu00","followers_url":"https://api.github.com/users/jinyu00/followers","following_url":"https://api.github.com/users/jinyu00/following{/other_user}","gists_url":"https://api.github.com/users/jinyu00/gists{/gist_id}","starred_url":"https://api.github.com/users/jinyu00/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jinyu00/subscriptions","organizations_url":"https://api.github.com/users/jinyu00/orgs","repos_url":"https://api.github.com/users/jinyu00/repos","events_url":"https://api.github.com/users/jinyu00/events{/privacy}","received_events_url":"https://api.github.com/users/jinyu00/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-01-05T12:59:14Z","updated_at":"2018-02-01T02:19:07Z","closed_at":null,"author_association":"NONE","body":"Now I can run system() by rop,  but I don't know how to exploit it without add our busybox, Because the default busybox only support few command.\r\n\r\n\r\n![paste image](http://oy9h5q2k4.bkt.clouddn.com/1515157125919tg5acm7h.png?imageslim)"},"comment":{"url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/comments/362136923","html_url":"https://github.com/BigNerd95/Chimay-Red/issues/6#issuecomment-362136923","issue_url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/6","id":362136923,"user":{"login":"Hume83","id":11588112,"avatar_url":"https://avatars3.githubusercontent.com/u/11588112?v=4","gravatar_id":"","url":"https://api.github.com/users/Hume83","html_url":"https://github.com/Hume83","followers_url":"https://api.github.com/users/Hume83/followers","following_url":"https://api.github.com/users/Hume83/following{/other_user}","gists_url":"https://api.github.com/users/Hume83/gists{/gist_id}","starred_url":"https://api.github.com/users/Hume83/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Hume83/subscriptions","organizations_url":"https://api.github.com/users/Hume83/orgs","repos_url":"https://api.github.com/users/Hume83/repos","events_url":"https://api.github.com/users/Hume83/events{/privacy}","received_events_url":"https://api.github.com/users/Hume83/received_events","type":"User","site_admin":false},"created_at":"2018-02-01T02:19:07Z","updated_at":"2018-02-01T02:19:07Z","author_association":"NONE","body":"Hi BigNerd, the cuestion is how upload an busybox or tinyshell from remotely and create the rc.d, run.d and the bash file whitout mount the sda,\r\nStack Clash x86, depends of the binaries that come with busybox for create a reverse shell,\r\nyou talk about is possible  download  busybox using telnet as a fake http client or im wrong?.\r\nYou could explain a little about this.\r\n\r\nThanks for your great work, greetings!  💪\r\n"}}
{"actor":{"display_login":"Hume83"}}