Relay Attack Example
I found one Backup manager plugin in WordPress.
I will be abusing that.
I see that we can enter the backup path, which suggests it will authenticate the user. I will attempt a relay attack.
Step 1: Start the impacket relay server.
Step 2: Start the listener.
Step 3: Enter any location in backup path and save it.
You will get the shell :-)
Last updated