Home

METHODOLOGY

1. Scan

• Scan ports
• Target those with high number of open ports.
• Target those websites with textboxes.
• Target those with old OS.

2. Search vulnerabilities

• Find LFI and RFI from website
• Find SQL Injection.

3. Get reverse shell

3.1 Create reverse shell listener

• Use nc.exe as reverse shell listener

3.2 Create reverse shell payload

• Use msfvenom to create reverse shell payload

3.3 Upload reverse shell payload to victim

• Anonymous FTP
• SMB vulnerabilities (Eternal Blue...)
• Contaminate evil code in web logs ...

3.4 Execute uploaded code to create reverse shell.

• Execute uploaded code by browsing web page.
• Execute RFI code
• Execute LRI code with contaminated web logs.
• Execute via SMB vulnerabilities

4. Escalate privilege

4.1 Get more information about the OS version, scheduled tasks...

4.2 Escalate to get root/admin shell or create root/admin users

• Use kernel exploits on kernel vulnerabilities.
• Use software exploits on software vulnerabilities.
• Replace files with high-privilege process permission but low-privilege file permission. And wait to be executed.