Right, so now that we managed to get a remote shell from our target computer, let's see if we can
do the same and use the same exploit with medium security.
So I'm going to cancel this.
And I'm going to go to the security level.
And I'm going to say that to medium.
Submitted.
And we're going to go back to our final inclusion vulnerability.
I'm going to listen on the same path exactly like we did in the last video.
And I'm going to use the exact same way to get back to the show, so we're just going to put the text
file that contains the code for the reverse connection.
So that's our file and we run it, and as you can see, we get nothing here and we get an error message.
So what's happened here is it could be that the exploit is patched or maybe they're using some sort
of filtering.
You can try and play around with the code now, obviously they can through the filter based on your
name, because, you know, you can have any name in here, they can't really filter on that because,
again, you can have dots and file names like the file that they had originally is the original file
is called.
Include those.
So, again, they can't really have a filter on the dots, so the things that would should raise flags
for you is the forest, which is highly unlikely because, again, for stoushes are used a lot and the
GDP because usually you would not have http ARRL after the first HTP.
So I'm going to use is I'm just going to try and put instead of normalities.
I'm going to put capitalises.
So instead of small Maltese Malti, I have heard GTP, but the truth is in there are capital and if
I had Eterna.
You'll see that I got my connection right here, and again, I have full access to the server where
I can do whatever I want.
Now, obviously, this is happening because the way that they're securing this is not right and we're
going to talk about security in and future lecture.
So I just want to show you the code now, though, just a quick look.
I usually don't show the code.
As you can see here, they're actually looking for hasty steps and they're replacing that with nothing.
So that's why when we used captivities, we were able to bypass this filter.
So always using filters is never a good idea because filters can always be bypassed.