alt Hacker NewsUse extreme caution running arbitrary code on your machines, especially obfuscated code that tickles kernel bugs! (edited)
Replies
charcircuit • yesterday at 6:58 PM
The page explicitly describes that it is stealthy as it does not make permanent changes, only corrupting the binary in memory.
Analysis of the POC concurs with my tests that confirm that the portion of `su` that gets overwritten does not survive a reboot.