So far in this course, we've seen how to discover and exploit a large number of vulnerabilities.
We've seen how we can exploit these vulnerabilities, such as SQL injections, file inclusion and code
execution, and even file upload and get a reverse shell so that we'll actually have access to the server
itself.
In the file upload example, we were able to upload a web shell, which gives us a lot of capabilities
and a lot of features.
In simpler examples, like the code execution and in the SQL injection, we only managed to get a reverse
shell.
So in this section, we're going to see how we can interact with the reverse shell.
With we've leased Shell and we'll see what can we do now that we actually have access to the target
server?
So I'm going to start with the reverse shell because it doesn't give us as much capabilities as we believe.
And then we'll see how we can escalate that to a V shell and then we'll see what we can do after that.
So first of all, here, I'm just going to listen on four, eight, eight, eight, eight.
And so that I just want to get a reverse connection on this computer.
Now I'm going to get my IP by running if config.
And my IP is ten 2014 to 13.
So I'm just going to go to my DWI and exploit the code execution vulnerability just so that we can have
a reverse shell and then we'll see how we can interact with it.
So I'm going to do this quickly because we've already spoken about it in the code execution lecture.
So I'm just going to set the security level to low.
And then go on the command execution.
Make this bigger.
And as you remember, we used to put an IP address, so I'm just going to put anything.
The semicolon and then the code that we want to run and I want to get a connection using that cat.
So I'm going to do NC.
And then put the port.
Now, this is the same code that we used in the SQL injection.
We only wrap this in PHP code.
It's the same code that we used with the file inclusion vulnerabilities as well.
So we'll actually be getting the same access as what we're getting in here when we exploit the other
vulnerabilities, the SQL injection and the local file inclusion.
So if we go here.
Now we actually have a complete bash shell so we can run any bash commands.
We want the exact same commands that we've seen in the Linux Basic section at the start of this course.
Now in all of the previous lectures we used to stop, once we get to this point and in the file upload,
as I said, we got a weekly chart which gives us more, more capabilities.
So the for the first thing I'm going to teach you, what can you do now with this access with the reverse
shell access?
Then once we know what you can do with that, we're going to see how you could escalate this and convert
it to a weebly shell, which allows you to do more attacks or allow you to do more things on the target
computer.
Once we have a with shell, so we'll be at the same level at as what you would gain when you exploit
a file upload vulnerability.
We'll see what could you do with that?
So you'll you'll learn a large number of powerful attacks like running system commands.
Even if there is security on the target server, you'll learn how to navigate to other websites on the
same server.
Read, upload and download files, access the database and bypass security measurements that might prevent
you from doing these things.
So in the next lecture, I'm going to start from here and we're going to keep building up on our access
and we'll see what can we do on the target server?