+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: CGI Hacks (/showthread.php?tid=5738313)
CGI Hacks - ironchin21 - Oct 16, 2017
Anyone Really good with hacking CGI, all Im looking for is a CGI script to get the get ROOT access to the server.
Nikto:
/cgi-sys/cgiwrap/ allows arbitriary uses to access remote command execution.
--------------------------------------------------------------------
On the webrowser:
This is what I have so far....
http://BLAH.com/cgi-sys/cgiwrap?user=(USERNAME)
---------------------------------------------------------------
http://www.BLAH.com/cgi-sys/cgiwrap?user=(USERNAME)&scriptname=(ANY DEFAULT SCRIPTS?)
----------------------------------------------------------
Any Default scripts I can you in order to access it?
* - k245nx - Oct 18, 2017
maybe it is vulnerable to shellshock. u can have internal function declaration in its environment variable. U can run arbitrary command by declaring an empty function and add a command after this declaration. Most web servers like Apache uses environment variables to pass headers to the CGI.
RE: CGI Hacks - ironchin21 - Nov 8, 2017
ok , thanks for replying, and can you dumb that down a tad bit lol . pretty much now I have enumerate the user but still need to find the query string in order to access anything on the server, what can I do now!