Laudanum, One Webshell to Rule Them All

April 29, 2024

ls /usr/share/laudanum

First I try to see the webpage of the ip

Then i add the IP and domain name in the /etc/hosts

I just use whatweb to see some details about the site

whatweb

After that i just copy the shell.aspx from the laudanum directory to current directory

cp /usr/share/laudanum/aspx/shell.aspx ./shell.aspx

I just add the ip of attacker

Upload the fileee

Access the filee

Use dir to see the current path

Then for the second answer just use locate