Rocket Chat
Last updated
Last updated
Learn & practice AWS Hacking: Learn & practice GCP Hacking:
If you are admin inside Rocket Chat you can get RCE.
Got to Integrations
and select New Integration
and choose any: Incoming WebHook
or Outgoing WebHook
.
/admin/integrations/incoming
Configure the WebHook (the channel and post as username must exists):
Configure WebHook script:
Save changes
Get the generated WebHook URL:
Call it with curl and you shuold receive the rev shell
According to the , both use ES2015 / ECMAScript 6 () to process the data. So lets get a like:
Learn & practice AWS Hacking: Learn & practice GCP Hacking:
Check the !
Join the 💬 or the or follow us on Twitter 🐦 .
Share hacking tricks by submitting PRs to the and github repos.