https://wearethebug.dev/tags/apache-config/Recent content on WE ARE THE BUGTradecraften-usFri, 11 Oct 2024 00:00:00 +0000https://wearethebug.dev/posts/vl-ten/Fri, 11 Oct 2024 00:00:00 +0000https://wearethebug.dev/posts/vl-ten/Ten is a Hard difficulty Linux machine that simulates a misconfigured shared-hosting environment. Players enumerate a public sign-up portal that provisions FTP accounts, abuse weak MySQL/FTP integration to pivot into a real local user, and finally achieve root by poisoning an etcd-driven Apache configuration reload.https://wearethebug.dev/posts/vl-zero/Fri, 25 Feb 2022 00:00:00 +0000https://wearethebug.dev/posts/vl-zero/Zero is an Insane difficulty Linux machine that features a web application that allows for the creation of credentials to be used on an SFTP server where users can create their own HTML pages. This service is exploitable by uploading a malicious .htaccess file to gain arbitrary file read access to the web servers' asset files. By viewing the source code of these files players will find hard coded credentials that allow for access to the target over SSH. The Apache server configuration is periodically managed by a cronjob that checks the integrity of the Apache configurations and can be abused by satisfying the conditions of the cronjob task to include a malicious line into the restored configuration to leak the contents of files owned by root.