Nasaha za bug bounty: jiandikishe kwa Intigriti, jukwaa la bug bounty la premium lililotengenezwa na hackers, kwa hackers! Jiunge nasi kwenye https://go.intigriti.com/hacktricks leo, na anza kupata zawadi hadi $100,000!
Automatic Scans
droopescan
pip3installdroopescandroopescanscanmoodle-uhttp://moodle.example.com/<moodle_path>/[+] Plugins found:forumhttp://moodle.schooled.htb/moodle/mod/forum/http://moodle.schooled.htb/moodle/mod/forum/upgrade.txthttp://moodle.schooled.htb/moodle/mod/forum/version.php[+] No themes found.[+] Possible version(s):3.10.0-beta[+] Possible interesting urls found:Staticreadmefile.-http://moodle.schooled.htb/moodle/README.txtAdminpanel-http://moodle.schooled.htb/moodle/login/[+] Scan finished (0:00:05.643539elapsed)
moodlescan
#Install from https://github.com/inc0d3/moodlescanpython3moodlescan.py-k-uhttp://moodle.example.com/<moodle_path>/Version0.7-Dic/2020.............................................................................................................ByVictorHerrera-supportedbywww.incode.cl.............................................................................................................Gettingserverinformationhttp://moodle.schooled.htb/moodle/...server:Apache/2.4.46 (FreeBSD) PHP/7.4.15x-powered-by:PHP/7.4.15x-frame-options:sameoriginlast-modified:Wed,07Apr202121:33:41GMTGettingmoodleversion...Versionfoundvia/admin/tool/lp/tests/behat/course_competencies.feature:Moodlev3.9.0-betaSearchingvulnerabilities...Vulnerabilitiesfound:0Scancompleted.
Nimegundua kwamba zana za kiotomatiki ni zisizo na maana katika kutafuta udhaifu unaoathiri toleo la moodle. Unaweza kuangalia kwao katika https://snyk.io/vuln/composer:moodle%2Fmoodle
RCE
Unahitaji kuwa na meneja nafasi na unaweza kusanidi plugins ndani ya "Usimamizi wa tovuti" tab**:**
Kisha, unaweza kusanidi plugin ifuatayo ambayo ina classic pentest-monkey php rev shell (kabla ya kuipakia unahitaji kuifungua, kubadilisha IP na bandari ya revshell na kuikandamiza tena)
Nasaha ya bug bounty: jiandikishe kwa Intigriti, jukwaa la bug bounty la kiwango cha juu lililotengenezwa na hackers, kwa hackers! Jiunge nasi kwenye https://go.intigriti.com/hacktricks leo, na uanze kupata zawadi hadi $100,000!