Back to WriteupsTryHackMeEasyTryHackMe - Davwebdavcadaverphpdefault-credentialslinuxEnumerationNmap BASH COPY COPIED! PORT STATE SERVICE 80/tcp open http Got only one port open which is strange but ok lets see Got a directory by fuzzing: http://10.10.10.10/webdav Its default credentials are wampp:xampp - got it from GitHub Went directly to cadaver and put a PHP reverse shell Got the shell and got everything SOLVED IN 3 MINS Key Takeaways Default Credentials - Always check for default credentials on WebDAV Cadaver - Great tool for uploading files to WebDAV PHP Reverse Shell - Classic technique for getting initial access
EnumerationNmap BASH COPY COPIED! PORT STATE SERVICE 80/tcp open http Got only one port open which is strange but ok lets see Got a directory by fuzzing: http://10.10.10.10/webdav Its default credentials are wampp:xampp - got it from GitHub Went directly to cadaver and put a PHP reverse shell Got the shell and got everything SOLVED IN 3 MINS Key Takeaways Default Credentials - Always check for default credentials on WebDAV Cadaver - Great tool for uploading files to WebDAV PHP Reverse Shell - Classic technique for getting initial access