Pasted%20image%2020240204183457

久违了,wireshark

…

suid加上./.suid_bash -p
执行他发现和bash效果一样
Pasted%20image%2020240204190115

所以照猫画虎,提权成功