So far in this course we've seen how to discover and exploit a large number of vulnerabilities.
We've seen how we can exploit these vulnerabilities such as skill injections for inclusion and code
execution and even file upload and get a reverse shell so that we'll actually have access to the server
itself.
And the file upload example we were able to upload a weekly show which gives us a lot of capabilities
and a lot of features.
In simpler examples like the code execution and in the SQL injection we only managed to get a reverse
shell.
So in this section we're going to see how we can interact with a reverse shell with Wheatley's shell
and we'll see what can we do now that we actually have access to the target server.
So I'm going to start with the reverse gel because it doesn't give us as much capabilities as we've
lived.
And then we'll see how we can escalate that to a shell and then we'll see what we can do after that.
So first of all here I'm just going to listen on port 8 8 8 8 and so that I just want to get a reverse
connection on this computer.
Now I'm going to get my IP by running ifconfig.
My IP is 10 2014 to 13.
So I'm just going to go to my DVD and exploit the code execution vulnerability just so that we can have
a reverse shell and then we'll see how we can interact with it.
So I'm going to do this quickly because we've already spoke about it in the code execution lecture.
So I'm just going to say at the security level to low
and then go on the command execution make this bigger.
And as you remember we used to put an IP address.
I'm just going to put anything at the semicolon and then the code that we want to run and I want to
get a connection using netcat so I'm going to do se
and then with the port.
Now this is the same code that we use and the scale injection we on Europe this in ph code.
It's the same code that we use with the file inclusion vulnerabilities as well.
So we'll actually be getting the same access as what we're getting in here when we exploit the other
vulnerabilities the SQL injection and the local file inclusion.
So if we go here now we actually have complete bash shell so we can run any bash commands we want the
exact same commands that we've seen in the Linux basic section at the start of the scarse.
Now in all of the previous lectures we used to stop once we get to this point and in the file upload
as I said we got a weekly shell which gives us more more capabilities.
So the first thing I'm going to teach you what can you do now with this access with their virtual access.
Then once we know what you can do with that we're going to see how you could escalate this unconverted
to a weekly show which allows you to do more attacks or allow you to do more things on the target computer.
Once we have a weekly shell I will be at the same level as what you would gain when you exploit a file
upload vulnerability.
We'll see what could you do with that so you'll you'll learn a large number of powerful attacks like
running system commands.
Even if there are security on the target server you'll learn how to navigate to other web sites on the
same server read upload and download files and access the database and bypass security measurements
that might prevent you from doing these things.
So the next lecture I'm going to start from here and we're going to keep building up on our access and
we'll see what can we do on the target server.