I'm gonna show you how to face a Web site by replacing its contents in just a few seconds using a tool
called briefly.
First of all we will generate a malicious file that will allow us to have remote access to the web server
in order to manipulate its contents.
This malicious file is actually our back.
So open your terminal here and right.
We then write we really generate.
Will be using the last command here to generate our backdoor.
We usually generate.
Then select a password for your file which is one to city in this case.
Then select the path that you will create the file in.
So I've created the file on my desktop.
So just list here and try to see the content of this fire.
You will see that the content of this file is encrypted which actually gives us another layer of protection.
I have created a simple file for this tutorial here.
It's a generic Web site that has couple of pages in addition to upload your CV page.
Now the purpose is to upload a web backdoor file to this Web server menu over the websites there they
offer this feature where you can upload your CV you can upload couple of images many of them block BHP
extension files but some of them they don't do so.
So you just have to check the vulnerable Web sites for that.
You can as well leverage what we have learned before.
In order to hack remotely over FTB and then you can up your backdoor fire.
Now go here to upload your CV click on Browse select the Baghdad file that we've created and upload
you will see that the file back door BHP have been uploaded it is supposedly uploaded under this path
here.
So let's take that here.
Copy that.
Go again to your terminal and issue the weekly command.
Now we want to establish a remote session with our back door file so we will use this command again
right to easily then enter the user L and change the uploader BHP here to backdoor BHP and then provide
your password.
Let's try to see if it's connected.
Just lists here and now you will be able to see the content of the files on the server you will as well
able to do the sprint working their activity.
You'll see that we're working on the var w w w h Tim all the content you can as well go to the root
of the swap sites.
Var w w H2 now and do another listing you will see that this is the index the BHP file which is the
home page.
Again let's go to the homepage here and try to refresh.
So now we want to deface this Web site.
We will remove this index to BHP and upload our index to BHP.
For this purpose you can type help in order to see all the modules that you can use on weekly such as
you can upload files you can download files you can brute force Eskew L you can dump a script databases
etc. For this purpose I'll be using file upload and this command remove the file so now we will remove
that school listing again we will remove file on this court are M A remove index the BHP and it will
give us two let's go again to the web browser here and just refresh the page so that in next of BHP
now is gone again let's go to our Candy Machine and try to upload a simple index to BHP file that we
have just created it is on the desktop again.
So the root desktop index to BHP.
Now we specified the origin no have to specify the destination of that which will be again under var
w w w h m l and it will be named index that BHP it will give us a true.
No let's go again to the Web site and refresh it.
And here you go.
We have defaced the Web site and uploaded our own BHP index file.