logoalt Hacker News

beepbooptheory • today at 2:30 PM • 1 reply • view on HN

Also, unless I am reading this wrong, it does not seem like what actually got the bitcoin was a 2shell-like exploit? Seems like memory corruption leading to printing out the flag through just http requests? How would you use this outside of a CTF context?

https://github.com/KillaBoi/StealMyBitcoin-PoC


Replies

cowlevel • today at 2:52 PM

2shell is catchy shorthand for "do anything". log4shell (originator of the name?) didn't directly give you a shell either, it ran some Java code. You could have a shell if you wanted to.