Right.
So now that we managed to get a remote shell from our target computer, let's see if we can do the same
and use the same exploit with medium security.
So I'm going to cancel this.
And I'm going to go to the security level.
And I'm going to set that to medium.
Submitted.
And we're going to go back to our financial inclusion vulnerability.
I'm going to listen on the same part exactly like we did in the last video.
I'm going to use the exact same way to get back the shell.
So we're just going to put the text file that contains the code for the reverse connection.
So that's our file and we run it.
And as you can see, we get nothing here and we get an error message.
So what's happened here is it could be that the exploit is patched or maybe they're using some sort
of filtering.
You can try and play around with the code.
Now, obviously they can't really filter based on your name because you know you can have any name in
here.
They can't really filter on dots because again, you can have dots and file names like the file that
they had originally is the original file is called.
Include the PHP.
So again, they can't really have a filter on the dots.
So the things that would should raise flags for you is the forward slash, which is highly unlikely
because again, four stashes are used a lot and the HTTP because usually you wouldn't have HTTP in URL
after the first http.
So what I'm going to use is I'm just going to try and put instead of normal TS, I'm going to put capital
TS.
So instead of huge small t small t, I have http.
But the two things in there are capital.
And if I hit enter now.
You'll see that I got my connection right here.
And again, I have full access to the server where I can do whatever I want.
Now obviously this is happening because the way that they're securing this is not right.
And we're going to talk about security in a future lecture.
So I just want to show you the code now, though.
Just a quick look.
I usually don't show the code.
And as you can see here, they're actually looking for HTTP and https and they're replacing that with
nothing.
So that's why when we used Capital TS, we were able to bypass this filter.
So always using filters is never a good idea because filters can always be bypassed.