Upload PHP Backdoor on a Windows IIS 10 Server - OSCP

This tutorial will teach you how to upload a PHP backdoor on a Windows IIS 10 server using smbclient. This tutorial can help cyber security enthusiasts in their pursuit of cyber security certifications like OSCP, OSWP, ECSA, etc.

This tutorial is for educational purposes only. The aim of this channel is to increase your cyber security awareness and help you pass cyber security certifications.

[ovilambru]

Great tutorial. I've seen that machine on HTB, but did not understand how you got smbclient to connect to the machine, how/where did you get the username tyler from, and how did you create that folder? Thank you very much, Ovi.
I like the way you explain, it was just that moment there that got me confused. Keep it up man, you rock!

[petar-hd]

What's the point uploading "back door" to a machine you have credentials for???

[CoryResilient]

But this assumes you already have access if you already had access this would be pointless and won't work in a real life scenario simulation and that's what counts. This is a waste

[artofprograming]

Thx it's great


How do you know it's use SMB server ? Do you have scanner or it's can for all server ?

Can it use for aphace server ?

[aliabdullah]

why win IIS server is running php ?? is it supposed to be only running on appache ?

[GodsEyeGamingOfficial]

BRO??? can i get that file plz???? i want to see whats inside!!