Differently from autovpn, this tool is able to run on Windows. Instead of executing sudo directly from the code, this tool leaves the task up to the user, so it is suposed to work on any platform.
- You download a file over HTTP
- This file is then piped straight into a file
- This file is then fed into OpenVPN running as root
So pretty much, if the remote host wanted to, they could run arbitrary commands on your host, as root.
You can provide script-security 2 inside the configuration file which will result in execution of binaries and other scripts inside the configuration file
¯\(ツ)/¯
So pretty much, if the remote host wanted to, they could run arbitrary commands on your host, as root.
You can provide
script-security 2inside the configuration file which will result in execution of binaries and other scripts inside the configuration file¯\(ツ)/¯