Haircut Info

Further exploration of the web application often identifies a PHP script that performs a curl command based on user-provided input. :

: This version of screen is vulnerable to a local privilege escalation (LPE) exploit (CVE-2017-5618), which allows an attacker to gain root access by manipulating log files. Key Resources for Walkthroughs haircut

: Provides a highly detailed Haircut walkthrough that explains both the "quick" path and a deeper look at the underlying PHP filtering. Further exploration of the web application often identifies

: Once the shell is uploaded, navigating to that file executes the malicious code, providing a low-privileged shell on the target system. Privilege Escalation : haircut

: Enumeration of the system reveals a specific version of screen (typically version 4.05.00) that has the SUID bit set.