Please enable JavaScript.
Coggle requires JavaScript to display documents.
Attacker, ssh windows L - Coggle Diagram
Attacker
Reconnaissance
Port Scanning
nmap
nmap -A xxx.xxx.xxx.xxx
Public Website
Ports in use
Port 80
Port 22
Services in Use
HTTP
SSH
Internal Management WebSite
Services in Use
HTTP
SSH
Ports in use
Port 80
Port 22
Public WebSearch
XSS-Stored
Reverse Shell
Get user credentials
Vulnerability
XSS-Stored(Public Website)
XPATH Injection(Internal Management WebSite
Weaponization
Tools
SSH
nmap
proxychains4
Attacker
ssh -D 1080 -N -f
vctim@172.32.0.15
proxychains4 nmap -sT -Pn 172.16.0.20
Port 80 is found
ssh -L 10000:172.16.0.20:80
vctim@172.32.0.15
Internal Management WebSearch
Reverse Shell via Web Shell Deployment Using XPath Injection
Get user credentials
ssh -L 9999:192.168.0.20:22
vctim@172.16.0.20
1 more item...
ssh windows L