Just a quick website I made up to demonstrate 4 common vulnerabilities found in websites today.
There are at least 2 different techniques you can use to get a shell.
The hacks are very basic but will give you a solid introduction to each of the 4 vulnerabilities present.
I won't give you any clues apart from it is
not SQLi, also
if you read the source before doing it then that is cheating!To install the script:git clone https://github.com/d4rkcat/SSWA
rm -rf /var/www/*
cp SSWA/index.php /var/www
service apache2 start
You should be able to get at it by visiting
localhost
In your browser! And everything is hackable from there, no tools at all other than a browser needed!
Happy Hacking!