Please enable JavaScript.

Coggle requires JavaScript to display documents.

FristiLeaks 1.3 (scanning/vuln searching (Open Port 80 (Enumerating…

- - - - apachae
        
        Web-server Scanning
        
        Nikto
        
        any related CVE, with web-services
        
        Dir-buster
    - - Robots.txt
        
        Dir-Buster
  - - - Not found any
    - - inspecting Source (homepage)
        
        names in Robot.txt are also Drinks
        
        homepage has clue about fristi
        
        navigating to /fristi
        
        success
        
        got admin Portal
        
        Breaking Login
        
        2 more items...
        
        Searching for Vuln in /fristi
        
        dirb
        
        1 more item...
        
        Inspecting Sources Code
        
        Found BreadCrumbs
        
        2 more items...
- - - - Uploading php reverse shell with .png extension
        
        set up listner
        
        got shell
- - - - following up
        
        /home/admin/chmod and INSPECTING directory
        
        BreadCrumbs
        
        /home/admin/ dir
        
        cronjob /tmp/runths
- - - - searching files owned by fristigod
        
        Inspection of files
        
        .bat_history
        
        we found .doCon binary used by user for root
        
        got root
        
        /root/fristileaks secrets.txt