1

I'm writing in order to ask for some help or advice regarding my problem. The trouble i'm facing is the following: Exploiting a path traversal on a local testing machine, i was able to get a bunch of log files (by which i mean, they are present, and could be downloaded) but... Here's the only way i can get it

<div class="col-1-1">
 ...
 X509KEY���>$�?��?�(?d�8�21�s����i�5
 ...
</div>

I already tried modifying my request to "Accept-Charset: UTF-8", also tried to capture it with Burp after which i saved the ".gz" file as [name].gz but that didn't work out either. Lately I've been messing around with wget (in python) to see if i can save only the content of the file (in it's natural encoded format) and deny the rest of the html content, but I doubt it'd work either.

Thank you for any advice in advance: R.

  • Is your question "How do I get the content of a file with wget in python?"? Also, please format your text properly, you may use the code block button – Purefan Feb 23 '17 at 14:42
  • 1
    Hi, Thank you for your notification, i'll format it right away. As for the question: Nope, i just wrote it to say that i'm trying that at the moment (take it as a list of "things i tried so far" :) ) What I'm curious about is that how would you guys/gals approach such a matter if you were facing it? Cheers: R. – H.R. Feb 23 '17 at 14:50
  • Thank you for re-formatting and clarifying your question. You mentioned this is a log file, do you know which program generates this log file? that would shed on some light as to why only part of the file is scrambled – Purefan Feb 23 '17 at 15:02
  • Sure, here's what I know of the Server: OS: IBM AIX 7.4.1 Web Server: WebSphere Application Server WebServ. Version: ? The log was generated by the server and zipped by "wassrvr" user (i guess that is the web master's account for the webserver), the extension is .gz – H.R. Feb 23 '17 at 15:17
  • 1
    I got to a point where i believe you are correct. Even if i weren't able to get anything concrete, someone else might have been. As for the accessible log: All of them... they kept a pretty neat record of where and under what names did they archive the daily logs (which could have been read by anyone from the sysadmin's .bash_history... Example: absolute/path/to/access_log_2017-02-19.gz absolute/path/to/access_log_2017-02-20.gz absolute/path/to/access_log_2017-02-21.gz absolute/path/to/error_log_2017-02-21.gz etc... i really am happy that this server got taken down. :D – H.R. Feb 23 '17 at 15:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.