Gaining a Reverse Shell through Command Panel

INFORMATION GHATERING

Dirsearch

Find hidden directories using Dirsearch (a command-line tool designed to brute force directories and files in webservers.)

python3 dirsearch.py -u http://10.10.51.149/

We get the following files and directories.

• /assets/
• /login.php
• /robots.txt

Login Page

Find username and password for login page

Let’s go to find something hidden in source code first.