Apache HTTP server control interface that can leak file contents via config Include directive.
apache2ctl {c} 📎 c apache2ctl {c}Sandbox: execFile · Timeout: 30s
system.file.read network.http.server.control | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
c | string | No | - | Pass a config directive | -c |
Inputs
system.file.path Path to file to read
Outputs
system.file.content File content leaked in error messages
Produces
system.file.contentConsumes
system.file.path| Resource | Value |
|---|---|
| CPU | low |
| Memory | 32 MB |
| Network | low |
| Disk I/O | low |
Read arbitrary file via Include directive in config
apache2ctl -c 'Include /path/to/input-file'Control interface for Apache HTTP server. When used with sudo, the -c Include directive can leak file contents through error messages.