Lucky discovery
Trying some server side javascript injection in mongodb, I wondered if it would be possible to pop a shell.
The run method seems good for this :
read more...........http://blog.scrt.ch/2013/03/24/mongodb-0-day-ssji-to-rce/
Lucky discovery
Trying some server side javascript injection in mongodb, I wondered if it would be possible to pop a shell.
The run method seems good for this :
read more...........http://blog.scrt.ch/2013/03/24/mongodb-0-day-ssji-to-rce/