The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
Twelve Years of Service
Posts: 1,038
Threads: 59
RE: LFI in CGI file help 08-05-2016, 09:16 PM
#11
(08-05-2016, 09:13 PM)meow Wrote: (08-05-2016, 08:58 PM)Axari Wrote: (08-05-2016, 08:52 PM)meow Wrote: Sorry lol, was trying something out.
Anyways, here's an update:
I was able to log into the admin panel of the device. There was an upload form but didn't allow anything except VALID jpeg files (couldn't bypass it, I tried everything I knew). Then after looking around some more I found a page that lets you import/export the system's configuration. I exported it to see if I could put a Perl reverse shell in there and then include it after importing it, however I'm faced with two problems 1. I don't know where the file is located on the fs, so I wouldn't know the path when including the file and 2. I've tried opening the exported configuration file with 2 different programs and its just unreadable shit. I need something that will give it to me in plaintext.
I'm pretty familiar with finding vulns directly in firmware tars, so I could take a look if you have a system firmware image, can extract the binaries and throw them in IDA for a quick looksee.
Nevermind, I fucking finally found a way to execute commands. Thanks for trying to help.
Damn, I was looking for a neat challenge. Out of curiosity, what did you do for execution? Used anoher bug? Embedded Linux devices are full of 'em.
•
Ten Years of Service
Posts: 732
Threads: 37
RE: LFI in CGI file help 08-05-2016, 09:23 PM
#12
(08-05-2016, 09:16 PM)Axari Wrote: (08-05-2016, 09:13 PM)meow Wrote: (08-05-2016, 08:58 PM)Axari Wrote: I'm pretty familiar with finding vulns directly in firmware tars, so I could take a look if you have a system firmware image, can extract the binaries and throw them in IDA for a quick looksee.
Nevermind, I fucking finally found a way to execute commands. Thanks for trying to help.
Damn, I was looking for a neat challenge. Out of curiosity, what did you do for execution? Used anoher bug? Embedded Linux devices are full of 'em.
Yeah, I found a completely different vulnerability.
•
Twelve Years of Service
Posts: 1,038
Threads: 59
RE: LFI in CGI file help 08-05-2016, 10:29 PM
#13
(08-05-2016, 09:23 PM)meow Wrote: (08-05-2016, 09:16 PM)Axari Wrote: (08-05-2016, 09:13 PM)meow Wrote: Nevermind, I fucking finally found a way to execute commands. Thanks for trying to help.
Damn, I was looking for a neat challenge. Out of curiosity, what did you do for execution? Used anoher bug? Embedded Linux devices are full of 'em.
Yeah, I found a completely different vulnerability.
Ah, I see. Do you mind elaborating?
•
Ten Years of Service
Posts: 732
Threads: 37
RE: LFI in CGI file help 08-06-2016, 12:25 AM
#14
(08-05-2016, 10:29 PM)Axari Wrote: (08-05-2016, 09:23 PM)meow Wrote: (08-05-2016, 09:16 PM)Axari Wrote: Damn, I was looking for a neat challenge. Out of curiosity, what did you do for execution? Used anoher bug? Embedded Linux devices are full of 'em.
Yeah, I found a completely different vulnerability.
Ah, I see. Do you mind elaborating?
I do.
•
Twelve Years of Service
Posts: 1,038
Threads: 59
RE: LFI in CGI file help 08-06-2016, 12:27 AM
#15
(08-06-2016, 12:25 AM)meow Wrote: (08-05-2016, 10:29 PM)Axari Wrote: (08-05-2016, 09:23 PM)meow Wrote: Yeah, I found a completely different vulnerability.
Ah, I see. Do you mind elaborating?
I do.
Dang, okay. Well, good luck.
•
Ten Years of Service
Posts: 13
Threads: 8
RE: LFI in CGI file help 08-17-2016, 10:07 AM
#16
(08-06-2016, 12:27 AM)Axi Wrote: (08-06-2016, 12:25 AM)meow Wrote: (08-05-2016, 10:29 PM)Axari Wrote: Ah, I see. Do you mind elaborating?
I do.
Dang, okay. Well, good luck.
Nigga you just got shot down.
@
meow not cool man, not cool.
•
Ten Years of Service
Posts: 732
Threads: 37
RE: LFI in CGI file help 08-17-2016, 04:49 PM
#17
(08-17-2016, 10:07 AM)2x0 Wrote: (08-06-2016, 12:27 AM)Axi Wrote: (08-06-2016, 12:25 AM)meow Wrote: I do.
Dang, okay. Well, good luck.
Nigga you just got shot down.
@meow not cool man, not cool.
I get that you're making a joke, but why are you bringing back a thread that has
no use at all? Not letting this thread die isn't cool.
•
Twelve Years of Service
Posts: 1,038
Threads: 59
RE: LFI in CGI file help 08-17-2016, 07:21 PM
#18
(08-17-2016, 10:07 AM)2x0 Wrote: (08-06-2016, 12:27 AM)Axi Wrote: (08-06-2016, 12:25 AM)meow Wrote: I do.
Dang, okay. Well, good luck.
Nigga you just got shot down.
@meow not cool man, not cool.
I would like to note that @
meow did actually clarify some things over PM so it was not all in bad taste.
•
Users browsing this thread: 1 Guest(s)