Can anyone help me with this I am stuck trying to figure this out. Been hammering on it a few days and can’t figure out what I am doing wrong
I found …_admin/index.php and I think this is not the good way finish the task.
Also I found that “…” will redirect me to error.php page and I can’t use that, also the version of PHP is 7 and I cant use %00 byte and URL encoding to bypass. I extratxt the content of all the web page like
-about
-contact
-industries
and I dont found any usefull stff. Can someone help me to finish this task?
But how? I haven’t been able to solve this for 4 days.
The source code of the main page showed me 3 possible arguments for index.php. Attempts to use different arguments for ‘index.php?page=’ failed.
ffuf does not let you know what other directories or pages there are.
js/main.js didn’t say anything either. Deobfuscation of other scripts, too.
The form for sending messages from the contacts section didn’t help.
The only result I could get was a message about incorrect input when I used the page= arguments of the form in all sorts of ways …//
An attempt to replace the User-Agent with a script and view /var/log/apache2/access. log fails.
Just like the other directories listed in the tutorial.
But how? I haven’t been able to solve this for 4 days.
The source code of the main page showed me 3 possible arguments for index.php. Attempts to use different arguments for ‘index.php?page=’ failed.
ffuf does not let you know what other directories or pages there are.
js/main.js didn’t say anything either. Deobfuscation of other scripts, too.
The form for sending messages from the contacts section didn’t help.
The only result I could get was a message about incorrect input when I used the page= arguments of the form in all sorts of ways …//
An attempt to replace the User-Agent with a script and view /var/log/apache2/access. log fails.
Just like the other directories listed in the tutorial.
Which direction should I go next?
Try read the index file and you will find something
Try read the index file and you will find something
Thanks. The source code of the index page ? Or the contents of the file index.php ? I can’t see the content index.php, only the source code of the index page. Probably if I could see. php then I would figure out how to get to the flag. How can I read index.php ?
Hello! I have a problem, I’ve done all the agent poisoning stuff to get RCE but I can’t go through the /root directory when I do the &cmd=ls+/root to see the flag file. I’ve thought that I couldn’t go through that directoy because I wouldn’t have permissions to do it so I tried to get a reverse shell to try privilege escalation techniques and didn’t worked.
Could I get any hints?
Hello! I found the admin page in the index.php source code. I open the page and I can read the passwd file in etc map but I couldn’t use such a technique what I can use for running such command like “ls”. Could somebody help me what kind of technique have to use on the admin page.
Type your comment> @B2Man said: > Hello! I found the admin page in the index.php source code. I open the page and I can read the passwd file in etc map but I couldn’t use such a technique what I can use for running such command like “ls”. Could somebody help me what kind of technique have to use on the admin page. I was able to do it. If somebody need help write to me.
