Black Hat Bash

6 GAINING A WEB SHELL

Now that you understand the power of the bash shell, it should come as no surprise that hackers find popping a shell exhilarating. The phrase popping a shell describes the outcome of any attack whereby a hacker gains local or remote access to a system’s shell, then sends execution instructions to it.

There are numerous ways to gain shell access to a remote system, each targeting different entry points. For example, you could gain a remote shell via a web application vulnerability, by brute-forcing system accounts on a server, or by exploiting a vulnerability in a network service, such as FTP or Server Message Block. ...