killchain-compendium/Post Exploitation/Windows/XAMPP.md

XAMPP

XAMPP on Windows

There is a way to upload a shell to escalate to nt authority\system privileges through xampp. I used this multiple times in the last few days. Upload a PHP shell like FOZZ's p0wny-shell to the C:\xampp\htdocs directory and visit the resource in the browser.