Alright, so here is what I did to a vulnhub machine after I found a XSS vulnerability in it.
- Generated a reverse_tcp php payload and kept it within my web server.
- Navigated to my web server's payload location via the document.location() method using the XSS exploit.
- On my end, the msfconsole is listening to any incoming connections.
- As soon as the target server redirects to my php payload, we get a meterpreter shell. But in like 5 min, I realized that it was a shell to my own machine and not the machine i'm trying to break into.
I'm a noob at using meterpreter and payload. Can anyone please help? I know the payload should be uploaded to the targeted server and then accessed. Can redirect to my web server not cause the payload to be executed in the targeted machine?