Zipper

Overview

---

• 1-Recon
  • Zipper_Recon
• 2-Enumeration

  • attachments

  • Zipper_Web

• 3-Exploitation

  • attachments

  • Zipper_Exploitation

  • Zipper_LFI

  • Zipper_Payload

• 4-Post_Enumeration

  • attachments

  • Zipper_Automated

  • Zipper_Cron

  • Zipper_Initial_Foothold_UNIX

  • Zipper_PSPY

• 5-Privilege_Escalation
  • Zipper_Privilege_Escalation

Target

---

192.168.201.229

Credentials

---

• root:WildCardsGoingWild(sys)

Note

---

Be wary of commands(7z, 7za, tar, zip) used in cronjob and wildcard bit(*)