Cyber Security | Ethical Hacking | Pentesting | Vulnhub | Walkthrough | Ted | Python
Pentesting Lab Exercises Series – Vulnhub
Virtual Machine Name: Ted: 1
Link: https://www.vulnhub.com/entry/ted-1,327/
My Twitter：@ junhua_cyber
Tips:
1. Uses hashlib and request modules of Python to crack login page.
2. Where is php session stored:
File-based Storage: The session data is stored in files, usually in a directory like /tmp on Unix-like systems, or a specified directory on Windows. File Naming: Each session is stored in a file named with the session ID, which is usually a string of random characters (e.g., sess_123abc456def).
3. php://filter : include local file and base64 encode as the outputphp://filter/convert.base64-encode/resource=index.php
4. Convert cURL to python code very quickly:
https://curlconverter.com/
Views : 36
cyber security
