Update Cheat Sheet.md

This commit is contained in:
ARZ 2021-11-12 21:43:39 +05:00 committed by GitHub
parent a0512879ce
commit 1a6d75b261
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -613,6 +613,12 @@ Here `api-endpoint` can be for example `/api/v1/resources/books\?FUZZ\=.bash_his
### Web Shell Bash ### Web Shell Bash
`bash -c "<bash_rev_shell>"` `bash -c "<bash_rev_shell>"`
### Cacti
This is remote code execution exploit for cacti 1.2.8 <br/>
https://zerontek.blogspot.com/2020/10/hacking-walkthrough-cacti-128-ubuntu.html
### Wordpress ### Wordpress
using wpscan we can find users or do some further enumeration of wordpress version using wpscan we can find users or do some further enumeration of wordpress version
* `wpscan --url http://<ip>/wordpress -e u` Enumerate Users * `wpscan --url http://<ip>/wordpress -e u` Enumerate Users