Blog Post
StefanApostol
Immerser
2 days agokevin1 can you please show, in order, the following steps:
- generate the Metasploit payload
- host it using python http.server
- echo command in your original low-level meterpreter shell after exploiting webdav.
kevin1
Bronze II
2 days agoHi Stefan. Please see the screenshots and hopefully you can shed spme light on this saga.😊
- StefanApostol12 hours ago
Immerser
so in theory this should be it. after a minute, the cronjob should run. you can test this by going to /tmp and running clear-dav.sh manually. if it works, cron will do the same thing, but as root