Web

Identifying CVE

• CMS Name exploit as google search --> Rapid 7 will provide t CVE ID (mostly) --> Search CVE ID --> CVE Mitre site provides information about the exploit

• CVE-ID github provides opensource exploit scripts

RCE

• When ever you face an RCE exploit first check with a ping command because some RCE's are blind RCE (meaning the oupt for whoami /other commands will not be shown )