Web Penetration Testing with Kali Linux Second Edition by unknow

Author:unknow
Language: eng
Format: epub
Publisher: Packt Publishing

Next, we need to find a way to make this PHP shell accessible from the target. An easy way to do this is to host this file on a web server. Python allows you convert a folder into a web directory using just a single command. You need to first change the directory to the one holding the phpshell.txt file and use the SimpleHTTPServer library provided with Python to start serving the file over a web server:

The job is only half done; we need to get the meterpreter up and running so that the web server can connect to the attacker's machine and then inject the URL of the phpshell.txt file in a vulnerable input field on the target web application. The commands to run in Metasploit are shown in the following screenshot:

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.