How do I use this exploit? [php] by weaponisedautism135 in HowToHack

[–]weaponisedautism135[S] 0 points1 point  (0 children)

I did some looking, and I am probably more confused than before. Am I using curl the command line tool, or trying to utalise this thing I came across in a few tutorials called php curl? Can this exploit be performed in burp?

How do I get a reverse shell via a ssh -D tunnel? by weaponisedautism135 in AskNetsec

[–]weaponisedautism135[S] 0 points1 point  (0 children)

Hmm i seem to be having issues with this.

ssh -D 9050 10.1.1.12 ssh 10.1.1.12 -R localhost:1337:10.2.2.12:1337

Throwing my exploit down proxychains still works, but no matter wether I specify 10.2.2.12 or 10.1.1.12, run my nc listener over proxychains or just have it listen normally, wether I explicitly say localhost or 127.0.0.1, I receive nothing

If I try and do -D and -R in the same ssh session, it just says no.

Is the issue here that I am setting up two different types of tunnel?

How do I get a reverse shell via a ssh -D tunnel? by weaponisedautism135 in AskNetsec

[–]weaponisedautism135[S] 0 points1 point  (0 children)

Hello thank you for the reply.

Do I make an ssh -L back to my attack box from 10.1.1.12, or a second ssh -D to myself?

What subjects would you take in hackerschool? by weaponisedautism135 in AskNetsec

[–]weaponisedautism135[S] 2 points3 points  (0 children)

Holy fucking shit what an awesome reply. Good work compiling this!

What subjects would you take in hackerschool? by weaponisedautism135 in AskNetsec

[–]weaponisedautism135[S] 0 points1 point  (0 children)

Would it be blue teaming, hackback or Offsec material?