boxxy 0.14.0

Linkable sandbox explorer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

#![cfg_attr(not(unix), allow(unused_imports, dead_code))]

use std::env;
use std::ffi::CString;

#[cfg(unix)]
fn chroot(path: &str) -> Result<(), errno::Errno> {
    let path = CString::new(path).unwrap();
    let ret = unsafe { libc::chroot(path.as_ptr()) };

    if ret == 0 {
        Ok(())
    } else {
        Err(errno::errno())
    }
}

#[cfg(unix)]
fn getuid() -> libc::uid_t {
    unsafe { libc::getuid() }
}

#[cfg(unix)]
fn main() {
    if getuid() != 0 {
        println!("Error: this challenge needs root to set up");
        println!("\tcargo build --examples && sudo target/debug/examples/vuln-chroot");
        return;
    }

    let jail = "jails/empty/";
    println!("[*] creating jail at {:?}", jail);
    std::fs::create_dir_all(jail).unwrap();

    println!("[*] starting chroot...");
    chroot(jail).unwrap();

    env::set_current_dir("/").unwrap();

    println!("[+] jail is active, can you escape it?");

    boxxy::Shell::new(boxxy::Toolbox::new()).run()
}

#[cfg(not(unix))]
fn main() {
    panic!("unsupported platform");
}