Questions tagged [bash]
The Bourne-again shell (Bash) is a unix shell. It lets the user run commands on the host machine in as a text based program. Questions using this tag should either be related to vulnerabilities of bash or proper use of specific commands.
11
questions with no upvoted or accepted answers
5
votes
0answers
142 views
Why am I getting seemingly random fingerprints back when connecting via SSH/SCP?
I manage an application that connects to various servers using a client-specific keypair. We have around 70 customers; all but one can connect to our FTP server (for SCP) after first accepting the RSA ...
4
votes
0answers
133 views
Address of environment variable different for each directory
I'm writing a return-to-libc attack for a school project. My script retrieves the system(), exit() and shell addresses as follows (it's a sh script that calls some c programs):
Create the environment ...
2
votes
0answers
365 views
Unable to start reverse shell over HTTP
I am able to get a reverse shell working locally over TCP, but failing to trigger it remotely over HTTP.
Locally over TCP:
Attacker terminal runs netcat to listen for a connection over port 8000: nc -...
2
votes
0answers
91 views
Safe Bash Emulation - using chroot and qemu
I am trying to run a bash script in a sandbox to gain information about what it launches. There don't appear to be good emulators or static analysis tools for it, so I was going to run it in a chroot, ...
1
vote
0answers
122 views
Prevent Android Meterpreter being killed when apps are closed
This is the bash script for my android payload
#!/bin/bash
while :
do am start --user 0 -a android.intent.action.MAIN -n com.metasploit.stage/.MainActivity
sleep 60
done
The issue is when I do Clear ...
1
vote
0answers
118 views
How to stop logging for a specific user?
I'm a root user on my server. There are a bunch of users on my system.
As you know, when you type w you can see who is and who isn't online. With the last command you can check last users who were ...
1
vote
0answers
48 views
Input on a somewhat controversial backup solution using shell based SFTP
I've been tinkering with a backup solution in my spare time, made to simplify doing backups as much as possible. It's written in bash.
The solution consists of 2 files, one placed on a backup server, ...
1
vote
0answers
138 views
/bin/sh orphaned link - have I been hacked?
Just today I found that when I log in to my linux server, I receive an error message:
-bash: /usr/bin/lesspipe: /bin/sh: bad interpreter: No such file or directory
This seems to be because my /bin/...
1
vote
0answers
889 views
Bash shell exploit using SIP
I have a SIP proxy server, that would like to test Shellshock on.
I have used this https://github.com/zaf/sipshock to try and test.
but this is what I get.
So I just want to know generally what is ...
0
votes
0answers
54 views
how to hack rbash --?
I'm solving CTF challenge, and have to escalate the privilege from user1 to user2, $HOME is read-only, so i can't change $HOME/.bashrc.
sudo -l shows (user2) NOPASSOWRD: /usr/rbash -- i can't write ...
0
votes
0answers
93 views
How secure is /dev/stdin in UNIX systems?
Is decrypting secrets with ccrypt and piping the result via stdin to openvpn secure?
I've written the following alias to start an openvpn client more easily than before:
sudo bash -c 'cd ...
