command esecution

[noyse 0]

We have see how to listing dir or cat /etc/** , but we will able to wget a webshell? we first look at permission?

[Vincent 198]

Yes, you can look and see what folders are writable.

You can run a command like:

find / -type d \( -perm -g+w -or -perm -o+w \) -exec ls -adl {} \;

This will identify any world writable folders.

In the demo it was easy because the username was the default www usernames, so it was easy to identify that the html folder would be writable. 

You could also encode a webshell and upload it through the address bar, if you wanted to get really creative.