hola a todos, acabo de encontrar un l.f.i , pero no se que hacer...
intente hacer lo de Login-Root , pero no tengo habilitado en environ...
logro ver el passwd pero no en shadow....
hice un scan de puertos, y estaba el ssh abierto
mi pregunta es si puedo aprovechar el LFI para poder ver la llave del ssh para una coneccion remota...
ahora estoy estudiando eso...
index.php?area=/etc/ssh/sshd_config#
les dejo el config a ver si me hechan una mano
# Package generated configuration file # See the sshd(8) manpage for details
# What ports, IPs and protocols we listen for Port 22 # Use these options to restrict which interfaces/protocols sshd will bind to #ListenAddress :: #ListenAddress 0.0.0.0 Protocol 2
# HostKeys for protocol version 2 HostKey /etc/ssh/ssh_host_rsa_key HostKey /etc/ssh/ssh_host_dsa_key #Privilege Separation is turned on for security UsePrivilegeSeparation yes
# Lifetime and size of ephemeral version 1 server key KeyRegenerationInterval 3600 ServerKeyBits 768
# Logging SyslogFacility AUTH LogLevel INFO
# Authentication: LoginGraceTime 600 PermitRootLogin yes StrictModes yes RSAAuthentication yes PubkeyAuthentication yes
#AuthorizedKeysFile %h/.ssh/authorized_keys # Don't read the user's ~/.rhosts and ~/.shosts files IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts RhostsRSAAuthentication no
# similar for protocol version 2 HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication #IgnoreUserKnownHosts yes
# To enable empty passwords, change to yes (NOT RECOMMENDED) PermitEmptyPasswords no
# Change to no to disable s/key passwords #ChallengeResponseAuthentication yes
# Change to yes to enable tunnelled clear text passwords PasswordAuthentication no
# To change Kerberos options #KerberosAuthentication no
#KerberosOrLocalPasswd yes #AFSTokenPassing no #KerberosTicketCleanup no
# Kerberos TGT Passing does only work with the AFS kaserver
#KerberosTgtPassing yes X11Forwarding no X11DisplayOffset 10 PrintMotd no PrintLastLog yes KeepAlive yes #UseLogin no #MaxStartups 10:30:60
#Banner /etc/issue.net Subsystem sftp /usr/lib/sftp-server UsePAM yes
se aceptan sugerencias
:::Saludos:::
Autor