Is there any way that i can use the compromised website as the shell
What i am trying to achieve is to get a reverse shell on the machine,not a webshell.The target machine has a website hosted on it open to public.The machine is behind a waf so all tcp are blocked only port 80 is allowed.
Is there any tool out there that can make a php intermediate page between my uploaded reverse tcp shell in the website and my local listener
target machine netcat (NC1) <==>php intermediate webpage<====>attacker netcat (NC2)
how the implementaion should be: NC1 should bind to a localport in target machine ,the php page would read from the socket and upon recieving a get request from N2 would hand it over.
I know it can be programmed but i dont want to take the burden.