{"id":1504,"date":"2015-01-19T23:16:03","date_gmt":"2015-01-19T14:16:03","guid":{"rendered":"http:\/\/tech.akat.info\/?p=1504"},"modified":"2015-01-19T23:17:07","modified_gmt":"2015-01-19T14:17:07","slug":"apache%e3%81%a7bash%e3%83%97%e3%83%ad%e3%82%b0%e3%83%a9%e3%83%a0%e3%82%92%e5%ae%9f%e8%a1%8c%e3%81%99%e3%82%8b","status":"publish","type":"post","link":"https:\/\/tech.akat.info\/?p=1504","title":{"rendered":"apache\u3067bash\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3059\u308b"},"content":{"rendered":"

\u30ed\u30fc\u30ab\u30eb\u30b5\u30a4\u30c8\u306eapache\u3067bash\u3092\u5b9f\u884c\u3057\u305f\u3044\u306e\u3067\u8abf\u3079\u3066\u307f\u305f<\/p>\n

cgi\u30d7\u30ed\u30b0\u30e9\u30e0\u3068\u3057\u3066\u5b9f\u884c\u3059\u308b<\/h1>\n
\r\nroot@hostname:\/var\/www\/htdocs\/bash# lv \/etc\/apache2\/mods-enabled\/mime.conf | grep cgi\r\nAddHandler cgi-script .cgi\r\nroot@hostname:\/var\/www\/htdocs\/bash# cat ls.cgi\r\n#!\/bin\/bash\r\necho "Content-type: text\/plain"\r\necho ""\r\nls -altr\r\n<\/pre>\n
\"2015-01-19_230649\"<\/a>
\n.cgi\u30d7\u30ed\u30b0\u30e9\u30e0\u306b\u5b9f\u884c\u6a29\u9650\u304c\u306a\u3044\u3068\u304d\u306f\u4ee5\u4e0b\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u3067500\u30a8\u30e9\u30fc\u3068\u306a\u308b
\nPremature end of script headers: ls.cgi<\/p>\n
php\u30d7\u30ed\u30b0\u30e9\u30e0\u3068\u3057\u3066\u5b9f\u884c\u3059\u308b<\/h1>\n
\r\nroot@hostname:\/var\/www\/htdocs\/bash# cat ls.php\r\n<?php\r\n$output = shell_exec('ls -lart');\r\necho "<pre>$output<\/pre>";\r\n?>\r\n<\/pre>\n
\"2015-01-19_231204\"<\/a>
\n\u51fa\u529b\u306f\u6a19\u6e96\u51fa\u529b\u3060\u3051\u3068\u306a\u308b\u305f\u3081\u3001 \u6a19\u6e96\u30a8\u30e9\u30fc\u51fa\u529b\u3082\u5fc5\u8981\u306a\u5834\u5408\u306f ‘ls -lart 2>&1’ \u3068\u3059\u308b<\/p>\n","protected":false},"excerpt":{"rendered":"
\u30ed\u30fc\u30ab\u30eb\u30b5\u30a4\u30c8\u306eapache\u3067bash\u3092\u5b9f\u884c\u3057\u305f\u3044\u306e\u3067\u8abf\u3079\u3066\u307f\u305f cgi\u30d7\u30ed\u30b0\u30e9\u30e0\u3068\u3057\u3066\u5b9f\u884c\u3059\u308b root@hostname:\/var\/www\/htdocs\/bash# lv \/etc\/apache2\/mods-enab […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[63,9],"tags":[],"_links":{"self":[{"href":"https:\/\/tech.akat.info\/index.php?rest_route=\/wp\/v2\/posts\/1504"}],"collection":[{"href":"https:\/\/tech.akat.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tech.akat.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tech.akat.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tech.akat.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1504"}],"version-history":[{"count":3,"href":"https:\/\/tech.akat.info\/index.php?rest_route=\/wp\/v2\/posts\/1504\/revisions"}],"predecessor-version":[{"id":1509,"href":"https:\/\/tech.akat.info\/index.php?rest_route=\/wp\/v2\/posts\/1504\/revisions\/1509"}],"wp:attachment":[{"href":"https:\/\/tech.akat.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1504"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tech.akat.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1504"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tech.akat.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1504"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}