LFI to RCE via access_log injection

#Cisco UCS Manager 2.1(1b) - #Shellshock #Exploit Proof of Concept

Based on thatchrisecker. exploit at Exploit-DB.
I run this exploit on Cisco UCS Manager version 2.1(3e) and it's successfully reverse a bash shell.


Run the netcut on my machine


Run the Cisco UCS Manager Shellshock Exploit


Bash shell on Cisco UCS Manager Machine





Happy hunting guys! :)



./NoGe

Comments

Thomas More said…
Are you struggling to write a compelling literature review? Let me assist you! I'm Thomas, a Do My Essay specialist from Dissertation Educators, ready to help you summarize and analyze relevant research in your field.