Academy Skills Assessment - LFI help

Type your comment> @dragonwarrior said:

@thenevvin said:
Hello everyone,
I have been staring at the screen for days trying to figure this out. I have have successfully located the admin panel. But I cant figure out how to get to root. Someone help me please my brain is hurting.

Update: just finished. that was lit!

hmmm I’m also now at the admin panel and I think I have tried all the rce methods listed in the tutorial but nothing seems to be working?

I couldn’t find cookies for the webpage so that rules out the session files method, and I have tried the expect wrapper, data wrapper, rfi with python http server, and none of which seems to work.

I’m completely new to penetration testing. Could someone gimme a hint or sth? I’m stuck at getting rce for the last stage.

#btw basic LFI seems to work in the admin panel, but I believe it’s of no use?

Admin panel is needed to complete the lab. Read the “LFI to RCE” part entirely, there is a specific section that will help you get RCE.

PD: Apache is not the only software for server applications.