Back to Browse

Basic LFI - Part 2 Shell Access

665 views
Feb 7, 2017
4:41

This time we use the phph://input argument to allow us to spawn a shell with nc. There are many different techniques to do this, this one is the simplest. We tell the webserver to listen on port 10101 then fire up nc on the attacker machine and connect to that service. we then want to get out TTY so we run python -c 'import pty;pty.spawn("BRACKETbin/bash"BRACKET'

Download

0 formats

No download links available.

Basic LFI - Part 2 Shell Access | NatokHD