So guess in this, you know, we're going to take a look at this crown or the crown jewels, if up is
running as a route and we can modify it, then we can place the reversal and we'll get the road.
So that's what we are going to see in this video.
Now, let's see what's out there in the current show.
So let me get a second to give you the contents of this contest.
As you can see, there is there are some scripts, our daily, weekly and monthly.
And if you can see down hill, down below, you can see the route.
And we are going into this spot available there.
And then we are executing as a result of the script.
My secret is it's.
So now this is a good every minute, every hour, every minute, every hour, every day of the month
and etc., so good every minute.
So what we can do is we can see if there is any trading permissions for our users.
Let me look at this one.
OK.
Oh, yes, this one is inevitable, so I just did not see Gartree, let me go into the city where all
this red carpet is here and let's arrest minister.
So we have the right disease out there and we have the right person, so let's go into the city of W-W.
So the my Nazeer, so now let me read this with Nannerl, not my.
So it is already how this Shiban been, Bash and I will run through this.
This is second.
One second.
Any second now what I can do is I can push the, uh, the script.
So I am at this, uh, benchmark.
It was, uh, it was strategic.
Now, what I'm going to do is I will serve this bastard.
Shoot.
Sorry, bastard.
What Shakal now I'm going to put it in here that have been.
So you can also trade up, I don't.
But the bash is there and the Linux system and when I see it in here, I need to put the quotation marks,
quotations and bash and then.
I know I'm going to sell this, uh, OK, sorry, I did not.
So you're not in this IP address.
Sorry for the.
So my 10 zero hour after I have connected to this network that the room contains, this is configurable
one Coranderrk.
So no, let me pass this IP address here and let me put it in here and then I want to listen on the
vote.
One, two, three, four.
And before that, let me
start the cursor on.
One, two, three, four.
Put everything you said.
I'm going to say the script.
And now we should just wait for one minute to get Rachel.
As you can see it in a minute, we got the Ruggeri can see where my route and officinalis so you can
also get the HD or that just for subverting the question, OK, this is how we took advantage of this
configurable cron job.
So this granter by default executes as a route user.
So it should be taken that if any scripts should not be writable to any other resource except that other
than route.
So if any normal user had access the right access to this, any script that is running under the ground,
then he can just simply edit this file and purchase the reversal.
So I hope you understood this.
This is one of the method that takes advantage of this misconfiguration in the current jobs.
So I always try to make sure that your files are not readable with other users.