Ok, able to read the php files in var www html. Just can’t seem to figure out how to abuse the path. I’ve been looking at the list.js functions and also inside the fileRead.php. A nudge?
Looking for a privesc hint, currently stuck. Can’t understand how that versioned file can read with root permissions while the other file can’t. Any hints?
You might wanna check permissions or capabilities of that file… You’ll know what to do once you figure it out…
This was the one that did it for me. And now reading back all the other hints; can’t believe how incapable I was in finding the right command.
Glad it helped…