Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

audit_etcpasswd does not work! #93

Closed
imjdl opened this issue Aug 25, 2018 · 6 comments
Closed

audit_etcpasswd does not work! #93

imjdl opened this issue Aug 25, 2018 · 6 comments

Comments

@imjdl
Copy link

imjdl commented Aug 25, 2018

Hello Emilio, I read the description about audit_etcpasswd.I tested on my own Ubuntu but it didn't work.
My configuration is as follows:
Ubuntu18.0.4
PHP 5.6.37
php.ini:

operation result

I am very confused. Is there something wrong with me? Please help me, thank you (from Google Translate)

@epinna
Copy link
Owner

epinna commented Aug 25, 2018

Note that those php.ini setting shown here is just an example on which PHP restrictions the module should still work with. You don't need to set them to work with weevely.

Still seems something is going wrong, so please run :set debug True and try it again, and attach the screenshot here.

@ViCrack
Copy link

ViCrack commented Aug 26, 2018

猜测可以试着加个参数:audit_etcpasswd -vector=posix_getpwuid,
让weevely的audit_etcpasswd模块优先使用posix_getpwuid等php方法枚举uid的信息,构造出etc/passwd类似的内容。不知道是否因为choices参数没法初始化一个默认值,导致posix_getpwuid没有执行

default

@imjdl
Copy link
Author

imjdl commented Aug 26, 2018

@ViCrack 是的,加一个-vector=posix_getpwuid参数是可以执行的,weevely我也是刚用,源码也不熟悉,现在我正准备看一下源码。谢谢你。

@imjdl
Copy link
Author

imjdl commented Aug 26, 2018

@epinna I used @ViCrack method, and audit_etcpasswd can be used. But I don't know why, now I am trying to read the source code. thank you.

@epinna
Copy link
Owner

epinna commented Aug 26, 2018

Glad it worked, it also was an error on Weevely managing the vector argument. Now it should sort the vector out even if you don't specify it with -vector, please pull it again and try it if you can. Thanks.

@imjdl
Copy link
Author

imjdl commented Aug 26, 2018

I have tried it and can use it now.

@imjdl imjdl closed this as completed Aug 26, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants