In this video, we're going to see how to interact with Weebly and some of the basic commands.
So I'm going to connect to the show that we already uploaded in the previous video.
So all I'm going to do is weebly the URL where the shell is located, followed by the password.
Going to hit enter and I'm in.
So the first thing we're going to do is run the HELP Command.
So if you just type in help, you'll see all the commands that you can run using Weebly.
So these are all the functions that you can do.
So you can see the name of the function followed by the description of what the function does.
So the first thing the first thing that we're going to have a look on is system info, which basically
displays information about the current server that we have access to.
So for any of these commands, all you have to do is type it and it'll run.
Now some of them require options and we'll see how we do that.
So the first thing you want to do before you even run the command is you just tap the command.
So in our case, it's system info.
And then type minus age to see the options and the required.
Some of them have required commands and some of them have only optional arguments that you can give.
So for this one, you can specify what kind of information you want by putting in minus info, but generally
you can just run system info and it will show you information about the current operating system.
So I'm just going to run it normally, so I'm just going to type system info.
And as you can see, it collects information about the current server.
So you can see the IP.
You can see where your shell is located.
You can see the folder where the shell is located.
You can see information about the operating system.
So you can see it's a Linux operating system.
You can see the kernel version.
And as I said before, this is useful when you're trying to find local buffer overflow exploits so that
you can escalate your privileges.
You can see where the config is.
And again, we're going to talk about that in the future.
We can see the PHP version again, very useful when you're trying to bypass functions, when you're
trying to exploit vulnerabilities.
And again, we can see that it's a Linux operating system and our current user is w w w data.
So it's the result of the Who am I command?
And you can also see the document route, which basically refers to the directory which Apache uses
as its base.
So you can see that or we know already that in our Metasploit table all the websites are stored and
var w w w and then after that if you put the DVD Y, you'll be in DVD y.
If you put Matilda, you'll be in Matilda.
So again, this is very important information if you're trying to navigate from one website to another.
Speaking of navigating from one website to another, we've seen before how we can do cut.
Etsy password.
And that will give us the locations that will give us the users on the current operating system and
their locations where the document root is.
And I told you that you can use these locations to navigate within the server and go from one website
to another.
Mathilde also have a function that will automatically display this information for you without doing
cut etsi password and the function is called if you just do the help.
The function is called.
Ordered Etsy password.
So again, all you have to do is just type in audit.
Etsy password.
And before I run this again, I'm going to do the minus H to see the help.
And here you see, why is this useful?
Now you're going to you might think that why would I even need this function?
All I have to do is just do cut etsy password and I'll see the results.
Why would I need this function?
Why would I use it?
And what's handy in here is the vector argument.
So what this argument allows you to do is it specifies the method of reading that file because depending
on how you gain your shell access, depending on the configuration, on the server, on the web applications,
on the current user and a lot of variables, you might not be able to read what's inside that file.
So you might do cut Etsy password and you'll get nothing or you'll get permission denied.
So what's useful with this command is you can specify a number of methods to read that file.
And these the methods are listed in here and the vector argument.
And if you can't get it with one method, then just try the next one.
So I'm going to show you how to do this now.
And this is very useful because you have this vector argument with a lot of the functions in Weebly
and it's really handy because as I said, depending on the permissions, some of the functions might
not work and you can just use a different vector and it'll work.
So for our example, we can just do audit.
Etsy password and this will actually work.
But what I want to do is I want to show you how to use the vector in case that didn't work for you.
So all you have to do is just put in the vector argument.
Followed by the vector that you want to use.
So an example would be file right here.
So all you have to do is just type in a file.
And we can see that this particular vector didn't work.
So it can just try a different vector and we're going to go with a freed.
Again.
This one didn't work.
So we try another one and let's go with the.
File get contents.
Again.
No luck.
Let's go and try POSIX.
Get p.w uuid.
And here we go.
So like I said, in your example or in your case, try all the vectors.
Some of them will work.
Some of them might not work depending on the configuration.
So it's really handy option to use if the normal cut etsy password didn't work.