Skip to content

Commit 4ce4cf4

Browse files
authored
Update werkzeug_debug_rce.md
Added note about python3 version in verification steps because the version may change when a newer docker image becomes available. Added report.txt as a file because I apparently forgot it before and the containers fail to build without it.
1 parent 7838a94 commit 4ce4cf4

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

documentation/modules/exploit/multi/http/werkzeug_debug_rce.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -295,6 +295,10 @@ requesting the content of a file that doesn't exist in the container.
295295
if __name__ == '__main__':
296296
runserver()
297297

298+
#### report.txt
299+
300+
Hi there, I'm a sample report
301+
298302
## Verification Steps
299303

300304
1. Run the docker containers
@@ -308,7 +312,7 @@ requesting the content of a file that doesn't exist in the container.
308312
6. Do: `set VHOST 127.0.0.1`
309313
7. Do: `set MACADDRESS <mac-address>`
310314
8. Do: `set MACHINEID <machine-id>`
311-
9. Do: `set FLASKPATH /usr/local/lib/python3.12/site-packages/flask/app.py`
315+
9. Do: `set FLASKPATH /usr/local/lib/<python3.version>/site-packages/flask/app.py` (where `<python3.version>` matches the version on the system being exploited)
312316
10. Do: `run`
313317
11. You should see a PIN and a cookie being logged then get a shell.
314318

@@ -423,7 +427,7 @@ requesting the content of a file that doesn't exist in the container.
423427
82. Do: `unset AUTHMODE`
424428
83. Do: `set MACADDRESS <mac-address>`
425429
84. Do: `set MACHINEID <machine-id>`
426-
85. Do: `set FLASKPATH /usr/local/lib/python3.12/site-packages/flask/app.py`
430+
85. Do: `set FLASKPATH /usr/local/lib/<python3.version>/site-packages/flask/app.py` (where `<python3.version>` matches the version on the system being exploited)
427431
86. Do: `run`
428432
87. You should see a failure due to the check failing.
429433

0 commit comments

Comments
 (0)