I was working on the LFI academy module and I’m 90% sure I found the exploit for the skills assessment, but I cant get it to budge. Lets just say I got really close, and then it stopped working for me and I couldn’t get the original exploit to work after testing some things. I tried a new VPN file, a new box, and even a new session. I have not been able to produce the same results I got for my attacks the first time. I’ve found that a few boxes on the actual HTB site get broken a lot and need to be reset. This box in particular doesn’t seem to be very consistent. Has anyone else experienced things like this on HTB?
Which particular exercise are you referring to?
If it’s about log poisoning, we already have thread on this: