This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
first...we scan the IP machine with nmap | |
nmap -sV -sC <IP adress> | |
when nmap scan the IP we can know the service and versions | |
80/tcp open http PHP cli server 5.5 or later (PHP 8.1.0-dev) | |
so now lits go to the web and check it manuwally.. | |
we notice the inspector in the network the Respond is close! | |
and the service of the PHP is old! | |
we can search about the vrsion of PHP 8.1.0 dev is old and vulnerabl RCE {remote code execution} | |
okay we found the vulnerablity that caused the server to be unrespond! | |
so now lets fix it ...we can take vulnerability and save in folder with python {Exploit.py} to exploit it |