No command injection
Closed this issue · 0 comments
ampf27 commented
Im running portspoof as is videos and in the repo docs, the port 8080 is open, the command injection is exactly the same, the signature is sent but no command is executed
This is myiptables-config file
# Generated by iptables-save v1.8.7 on Mon May 2 08:59:34 2022
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A FORWARD -j ACCEPT
COMMIT
# Completed on Mon May 2 08:59:34 2022
# Generated by iptables-save v1.8.7 on Mon May 2 08:59:34 2022
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 1:21 -j REDIRECT --to-ports 4444
-A PREROUTING -i eth0 -p tcp -m tcp --dport 23:65535 -j REDIRECT --to-ports 4444
-A POSTROUTING -j MASQUERADE
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed on Mon May 2 08:59:34 2022
Somehow differs a bit fro yours