In this video, we're going to see how to interact with Waverly and some of the basic commands.
So I'm going to connect to the shells that we already uploaded in the previous video, so all I'm going
to do is we really the URL where the shell is located, followed by the password.
Can hit, enter and I'm in.
So the first thing we're going to do is run the help command, so if you just type in help, you'll
see all the commands that you can run using Mevoli.
So these are all the functions that you can do.
So you can see the name of the function, followed by the description of what the function does.
So the first thing the first thing that we're going to have a look on is system info, which basically
displays information about the current server that we have access to.
So for any of these commands, all they have to do is type it and it'll run.
Now, some of them require options and we'll see how we do that.
So the first thing you want to do before you even run the command is you just tap the command.
So in our case, it's system info.
And then type minus, to see the options and the required, some of them have required commands and
some of them have only optional arguments that you can give.
So for this one, you can specify what kind of information you want by putting minus info.
But generally you can just run system info and we will show you information about the current operating
system.
So I'm just going to run it normally.
So I'm just going to type system info.
As you can see, it collects information about the current server, so you can see the IP, you can
see where your shell is located.
You can see the folder where the shell is located.
You can see information about the operating system, so you can see it's a Linux operating system.
You can see the kernel version.
And as I said before, this is useful when you're trying to find local buffer overflow exploit so that
you can escalate your privileges.
You can see where the conflict is, and again, we're going to talk about that in the future, we can
see the HP version again, very useful when you're trying to bypass functions, when you're trying to
exploit vulnerabilities.
And again, we can see that the next operating system and our current user is the data.
So it's the result of the who who am I command.
And you can also see the document route, which basically refers to the directory which Apache uses
as its base.
So you can see that are we know already that in our meters floatable, all the websites are stored and
where the WW and then after that, if you put device, you'll be in the way.
If you put Mattilda, you'll be in Mattilda.
So again, this is very important information if you're trying to navigate from one website to another.
Speaking of navigating from one website to another, we've seen before how we can Dukat.
Etsi password, and that'll give us the locations that'll give us the users on the current operating
system and the locations where the document route is, and I told you that you can use these locations
to navigate within the server and go from one website to another.
They also have a function that will automatically display this information for you without doing Cat
ETEK password, and the function is called if you just do the help.
The function is called.
Audit ETEK password.
So, again, all you have to do is just type in audit.
ETEK password.
And before I run this again, I'm going to do the minus to see the help, and here you see, why is
this useful now you're going to you might think that why would I even need this function?
All I have to do is just Dukat ETEK password and I'll see the results.
Why would I need this function?
Why would I use it?
And what's handy in here is the vector argument.
So this argument allow you to do is it specifies the method of reading that file because depending on
how you gained your access, depending on the configuration on the server, on the web applications,
on the current user and a lot of variables, you might not be able to read what's inside that file.
So you might look at ETEK password and you'll get nothing or you'll get permission denied.
So what's useful with this command is he can specify a number of methods to read that file and these
methods are listed in here and the vector argument, and if you can't get it with one method, then
just try the next one.
So I'm going to show you how to do this now.
And this is very useful because you have this vector argument with a lot of the functions in Waverly.
And it's really handy because, as I said, depending on the permissions, some of the functions might
not work.
And you can just use a different vector and it'll work.
So for our example, we can just do audit.
ETEK password, and this will actually work, but what I want to do is I want to show you how to use
the vector in case that didn't work for you.
So all you have to do is just put in the vector argument.
Followed by the vector that you want to use, so an example would be filed right here.
So all you have to do is just type and file.
And we can see that this particular vector, Dannevirke.
So we can just try a different vector and we're going to go with Elfriede.
Again, this one didn't work, so we try another one and let's go with the.
File Geth contents.
Again, no luck.
Let's go and try POSIX get updated.
And here we go.
So like I said, in your example or in your case, try all the vectors, some of them will work, some
of them might not work depending on the configuration.
So it's really had the option to use if the normal cat ATC password didn't work.