So list HTP related services on Métis, Voidable three.
And the service, which runs on 85, 85, has important information.
That's right.
A Web Dabb service.
So in that enumeration stage, you have enumerated that you can upload a file to the server.
Now it's time to take advantage of this.
Now, remembering what we did before.
I'm going to start from the beginning so that you get in the habit of this.
First, choose the auxiliary module that provides us with an option to upload a file on the server.
Use auxiliary scanner, htp, htp put.
Show me the options.
All right, so set our host to ten point ten, 210, set path to forward slash uploads.
Next, you must set file data as your variable.
Now, what are we going to do here is I'm going to create an interpreter, reversed HCP, though, and
upload that page with this module.
So open a new tab, MSF Venom is a standalone payload generator for Métis Boyte.
We're going to discuss that later.
But right now, it's going to help us create the suitable payload, so let's type MSF Venom P.
And the payload name.
BHP interpretor.
Reverse TCP.
Host.
Is 10 to 10 to 11 and port is 85, 85.
Dash F, and that format's the pay, though raw.
And show the output file name.
Page dot, BHP.
OK, so we've created the file that contains our payload.
Let's go back to the mSv console.
Said the file name to Page Dot BHP.
And set final data to the file you've just created.
So for one last look at some of our options, controls which show options again.
And there's nothing to change, so let's run the module.
Don't worry about that, you can ignore this.
So open your browser and go to ten, ten to 10, colan, eight, five, eight, five slash uploads.
And here is the page dot file.
And if you click this page, yeah, goes right back to your column.
All right, so that's all well and good, however, now you need to prepare a listener for this connection
on Colly.
So let's go back to the MSF council.
Push M is the name of this module.
And let's use the multi handler.
That payload.
To be interpretor.
Reverse DCP, and that's a payload that you used previously and MSL venom.
Set almost to your colleagues i.p.
That airport to eight five eight five.
Last check.
Exploit Dash J.
So now a listener will wait for incoming connections in the background, so let's go to the browser
and.
Click the page that BHP.
Great.
So you got the interpreter, session nine.
So let's list the session.
Now let's interact with session nine, my typing sessions, Dashi nine.
And now you're interacting with Section nine.
So let's quickly look at who am I get Eweida.
And where am I so sinful?
And great, so you have another session on the machine.
And yes, you can go on to another service.