https://wearethebug.dev/tags/jsonpickle/Recent content on WE ARE THE BUGTradecraften-usFri, 04 Mar 2022 00:00:00 +0000https://wearethebug.dev/posts/vl-unchained/Fri, 04 Mar 2022 00:00:00 +0000https://wearethebug.dev/posts/vl-unchained/Unchained is a Medium-rated Linux machine available on Vulnlab platform. Starting with NFS share enumeration then a source code analysis allows a JSONPICKLE deserialization to obtain a reverse shell as user. For the privilege escalation, CVE-2021-44730 (Dirty snap-confine LPE) or CVE-2022-0847 (DirtyPipe) can be exploited.