Forum Discussion

ArthurDent's avatar
ArthurDent
Icon for Bronze II rankBronze II
28 days ago
Solved

CVE-2021-25281 (SaltStack) – Offensive

I've tried every way I can think of to use the python script for this lab. Here's and example using the state option:

I've also tried creating a python script to try to write to the /var/cache/salt/master/extmods/ directory, and tried creating the ssh key and uploading the public key with the ssh option. I've thrown some print commands in to see what is being passed in the requests. All end up with the Traceback similar to above. Is there something I'm missing in the syntax?