This video then I see you have to interact with really and some of the basic commands.
So I'm going to connect to the show that we already uploaded and the previous video.
So all I'm going to do is we really are L-word.
The shell is located followed by the password to hit enter and then.
So the first thing we're going to do is run the help command.
So if you just type in help you'll see all the commands that you run using really.
So these are all the functions that you can do.
So you can see the name of the function followed by the description of what that function does.
So the first thing the first thing that we're going to have a look on is system info which basically
displays information about the current server that we have access to.
So for any of these commands all they have to do is type it and it'll run.
Now some of them require options and we'll see how we do that.
So the first thing you want to do before you even run the command is you just type the command.
So in our case it's system info and then type minus page to see the options.
And they require some of them have required commands and some of them have on the optional arguments
that you can give.
So for this one you can specify what kind of information you want by put in minus info but generally
you can just run system info and this will show you information about the current operating system.
So I'm just going to run it normally so I'm just going to type system info
and as you can see it collects information about the current server.
So you can see the IP you can see where your shell is located.
You can see the folder where the shell is located.
You can see information about the operating system so you can see it's a Linux operating system.
You can see the kernel version.
And as I said before this is useful when you're trying to find local buffer overflow exploits so that
you can escalate your privileges.
You can see where the config is.
And again we're gonna talk about that in the future.
We can see the HP version again very useful when you're trying to bypass functions when you're trying
to exploit vulnerabilities.
And again we can see that it's a Linux operating system and our current user is the WW data.
So it's the result of the Who.
Who am I.
Command and you can also see the document root which basically refers to the directory which Apache
uses as its base.
So you can see that or we know already that an hour with exploitable all the Web sites are stored and
Vardaman WW and then after that if you put DVD-Video you'll be in DVD-Video.
If you put Matel there you'll be in Matilda.
So again this is very important information if you're trying to navigate from one website to another
Speaking of navigating from one website to another.
We've seen before how we can do cat ATC password and that'll give us the locations doesn't give us the
users on the current operating system and the locations where the document root is.
And I told you that you can use these locations to navigate within the server and go from one website
to another Matile they also have a function that will automatically display this information for you
without doing cat BTC password and the function is called If You just do the help the function is called
audits it is password.
So again all you have to do is just type in audit
UTC password
and before I run this again I'm going to do the minus page to see the help.
And here you see why is this useful now.
You're going to.
You might think that why would I even need dysfunction.
All I have to do is just do cat ATC password and I'll see the results.
Why would I need this function why would I use it.
And what's handy in here is the vector argument.
So this argument allow you to do is it specifies the method of reading that file because depending on
how you gained your shell access depending on the configuration on the server on the web applications
on the current user and a lot of variables you might not be able to read what's inside that file.
So you might do that UTC password and you get nothing.
Or you get permission denied So what's useful with this command is you can specify a number of methods
to read that file.
And these methods are listed in here and the vector argument and if you can't get it with one method
then just try the next one.
So I'm going to show you how to do this now.
And this is very useful because you have this vector argument with a lot of the functions in weekly
and it's really handy because as I said depending on the permissions some of the functions might not
work and you can just use a different vector and it'll work.
So for our example we can just do all that ATC password and this will actually work.
But what I want to do is I want to show you how to use the vector in case that didn't work for you.
So all you have to do is just put in the vector argument followed by the vector that you want to use.
So an example would be file right here.
So all you have to do is just like a file
and you can see that this particular vector didn't work.
So we can just try a different vector and we're going to go with Fareed.
Again this one didn't work.
So we try another one and let's go with the file gueth contents.
Again no luck.
Let's go and try 4:6 get PDB ID.
And here we go.
So like I said in your example or in your case try all the vectors some of them will work some of them
might not work depending on the configuration.
So it's really handy option to use if the normal cat ATC password didn't work.