From b5d9ca42cd14812e07461a76c0490010d334d05c Mon Sep 17 00:00:00 2001 From: Phil Date: Fri, 24 Dec 2021 14:04:08 +0000 Subject: [PATCH] Cleaned up the php shell --- README.md | 57 +++++++++++++++---------------------------------------- 1 file changed, 15 insertions(+), 42 deletions(-) diff --git a/README.md b/README.md index 1ae59b5..12ce723 100644 --- a/README.md +++ b/README.md @@ -21,14 +21,6 @@ * Gobuster * Backup File Artifacts Checker -* Web Vulnerabilities - * Repository Github - * Burp - * Web Checklist - * Nikto - * Payment functionality - - #### Nmap @@ -76,6 +68,7 @@ masscan IP -p 1-65535 --rate 100 -oX masscan.xml | -p | Ports to scan, E.g. -p80,8000-8100 | | --rate= | Rate of Packets-per-Second, E,g --rate=10000 = 10kpps (Too High can cause a Jam) | | --banners | -oB : save results of scan in binary format to | +| -oX | save them as xml in | | --open --banners --readscan -oX | read binary scan results in and save them as xml in | | --nmap | Options Compatable with Nmap| @@ -159,41 +152,21 @@ netdiscover -i ## Stage 2 - Foothold -### Attacking - Reverse Shells -#### PHP Reverse Shell +### Attacking - Web Reverse Shells +Kali / Parrot OS +``` +cd /usr/share/webshells/ +``` + +#### PentestMonkey PHP Reverse Shell + +* php-reverse-shell - A Reverse Shell implementation in PHP +* Copyright (C) 2007 pentestmonkey@pentestmonkey.net ``` /dev/null | +| Command| Discription | +|--------|-------------| +| find / -type f -user root -perm -4000 2>/dev/null | Find SUID Files |