hutgrabber

Host IP
192.168.100.1

Launch msfconsole

service postgresql start
sudo msfdb start
msfconsole -qr /home/siddicky/tools/multi-handler.rc

hutgrabber

#!/usr/bin/env

# Exploit Title: WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCE
# Date: [ 22-01-2023 ]
# Exploit Author: [BLY]
# Vendor Homepage: [https://wpscan.com/vulnerability/10389]
# Version: [ File Manager plugin 6.0-6.9]
# Tested on: [ Debian ]
# CVE : [ CVE-2020-25213 ]

hutgrabber

Linux Commands

---

Miscellaneous → quality of life improvements for CLI.

#chmod---------------------
chmod [r, u, g] [file] #basic syntax
chmod 444 file_name.type #example

hutgrabber

Host IP
192.168.100.1

Launch msfconsole

service postgresql start
sudo msfdb start
msfconsole -qr /home/siddicky/tools/multi-handler.rc

hutgrabber

Material For Given Topics:

1. Cyber Threats:

Context - For professionals working in the GST Department.

• Phishing via Emails
• Malicious Macros (word and excel)
• Client Site Request Forgery / Server Side Request Forgery
• Remote Code Execution
• Local File Inclusion / Remote File Inclusion
• Unauthorized Physical Access of the Machine

hutgrabber

/*
* (un)comment correct payload first (x86 or x64)!
* 
* $ gcc cowroot.c -o cowroot -pthread
* $ ./cowroot
* DirtyCow root privilege escalation
* Backing up /usr/bin/passwd.. to /tmp/bak
* Size of binary: 57048
* Racing, this may take a while..
* /usr/bin/passwd overwritten