Taken from https://github.com/InsecurityAsso/inshack-2018/blob/master/web/curler/exploit/exploit
660 B
660 B
description, functions
| description | functions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Note that the subprocess is immediately sent to the background. The remote file `aaaaaaaaaaaaaaaa` (must be a string of 16 hex digit) contains the shell script. Note that said file needs to be written on disk in order to be executed. |
|