1 2 3 4
#!/bin/sh # DF-0768 run (see VERDICT.md for preconditions) cd "$(dirname "$0")" ./run.sh maxx (as root: starts malicious NFSv3 server, mounts with -o rdirplus, fires unprivileged 'ls -f /mnt' as maxx)