File Inclusion/Directory Traversal - Stuck at admin panel

HTB Content Academy
1

I’m trying to finish the Academy File Inclusion/Directory Traversal but I’m stuck at this point:

image
image682×674 23.2 KB

I’m trying to see access logs so maybe I can poison cookies or user-agent but I can’t navigate into there, I try to read /var/lib/php/sessions/sess_[COOKIE SESSION STRING]

So I can read /etc/passwd but can’t locate /var/lib/php/sessions/sess_[COOKIE SESSION STRING]

Help please :smiley:

2

Solved

3

I found the upload directory but i don’t know how to do LFI.

4

How did you solve it? I am at the same admin page and I have no idea how to get a shell or how to get the flag’s location. Please give me any hint. Thanks.

5

OK I have done IT!
Funny file name:)