Web Malware

[madarauchiha]

If i have a reverse shell on a webserver , how can i hack all servers hosted on same server any one know ?, i know the half term abt sym link but i dont have full knowledge abt it does it work on wp or joomla sites only ?

 

[Panam 87]

Enumeration is always your friend. Scan the server for privilege escalation vulnerabilties to get root access. If you're not sure how to scan, I suggest you start learning the basics with a beginner friendly website like TryHackMe or HackTheBox.

 

[zeggiz]

Look discovery content on GitHub Pentest topic.

 

[DimmuBurgor]

does it work on wp or joomla sites only ?

Attempting to decipher this word salad nearly fucked my brains so I will just

/(?! (\b".." \b)) /gim

pretend like didn't see it =))

Start off by making sure you're not working in the cloudlinux distro, because if you are- just cut your losses and move along!
Next look at permissions to see if you have 644 or 777. If yes go straight to symlink, but probably not... so try breaking in to some other shell with cli text editor

:!".."

. Alternatively, the same by way of any output requiring pagination or a billion more obvious mechanisms. Use pipes, redirections, and write from path>x00 etc etc

 

[madarauchiha]

Attempting to decipher this word salad nearly fucked my brains so I will just

/(?! (\b".." \b)) /gim

pretend like didn't see it =))

Start off by making sure you're not working in the cloudlinux distro, because if you are- just cut your losses and move along!
Next look at permissions to see if you have 644 or 777. If yes go straight to symlink, but probably not... so try breaking in to some other shell with cli text editor

:!".."

. Alternatively, the same by way of any output requiring pagination or a billion more obvious mechanisms. Use pipes, redirections, and write from path>x00 etc etc

somewhat complex for me to understand xD