Subrion CMS Pentesting

TYPO3 Pentesting

WordPress Pentesting

Framework

AJP (Apache JServ Protocol) Pentesting

Angular Pentesting

Apache Struts Pentesting

Django Pentesting

Flask Jinja2 Pentesting

Python Pickle RCE

Ruby on Rails Pentesting

Spring Cloud Function RCE

Spring Pentesting

Tornado Pentesting

Werkzeug Pentesting

Template Engine

JsRender Template Injection

Pug Pentesting

API

API Pentesting

GraphQL Pentesting

Cloud

AWS (Amazon Web Services) Pentesting

Spring Cloud Function RCE

Microsoft

Microsoft Exchange Server Pentesting

Tool

Add Custom HTTP Headers in Burp Suite

Automate Sequence Requests with Burp Intruder

Burp Suite Troubleshooting

File Upload Attack on Exiftool

How to Use OWASP ZAP

Integrate Burp Request and SQLmap

SOCKS Proxy in Burp Suite

Turbo Intruder in Burp Suite

Others

Apache ActiveMQ Pentesting

Apache Tomcat Pentesting

Apache Zeppelin Pentesting

Atlassian Confluence Pentesting

Bookmarklet Attack

Broken Link Hijacking

Browser in the Browser (BITB) Attack

CGI Pentesting

Cacti Pentesting

Captcha Bypass with OCR

ClipBucket Pentesting

Code Deobfuscation

Codiad Pentesting

Dompdf RCE

Dump Git Repository from Website

Extract Web Browser Passwords

GhostScript Pentesting

Go SSTI

Grafana Pentesting

HTML Smuggling

HashiCorp Consul Pentesting

Icinga Web Pentesting

JBOSS Pentesting

JWT (Json Web Token) Pentesting

Java RMI Pentesting

Jenkins Pentesting

LimeSurvey Pentesting

Log4j Pentesting

OpenCATS Pentesting

PHP RCE Cheat Sheet

PHP Srand Time Abusing

PHP hash_hmac Bypass

Restaurant Management System (RMS) Pentesting

TeamCity Pentesting

Tiny File Manager Pentesting

Web Browser Settings for Pentesting

Web PHP Pentesting

WebAnno Pentesting

WebDAV Pentesting

WebSocket Pentesting

Webmin Pentesting

Subrion CMS Pentesting

Last modified: 2023-02-20

Subrion is a content management system (CMS).

File Upload to Reverse Shell (Credential Required)

1. Download Reverse Shell Payload

Get the PHP payload from php-reverse-shell. And change the file extension to '.phar'.
Then start a listener.

nc -lvnp 4444

2. Upload the Payload in Subrion Panel

Login
Move to Content -> Uploads in Panel
Upload reverse-shell.phar
Access to /subrion/upload/reverse-shell.phar

Now you get a shell.

Method

Security Risk

Cookie

CMS

Framework

Template Engine

API

Cloud

Microsoft

Tool

Others

Subrion CMS Pentesting

File Upload to Reverse Shell (Credential Required)

1. Download Reverse Shell Payload

2. Upload the Payload in Subrion Panel

ON THIS PAGE