Spoiler Removed
Rooted…!!
User: Find a way to upload, get a stable shell first and then Enumerate !
Root: Find an interesting file and learn what it is running!
You can PM anytime for HELP…! 
I’ve been fighting with this file upload deal for a few hours. I’ve done everything I can find to bypass file upload restrictions. I can’t get anything to upload successfully. Usually this is fairly trivial… but it just isn’t working at all. I really need some help. I obviously can’t list everything I have tried here, but I’d be happy to spell it all out for anyone willing to throw me some help in a PM.
EDIT: Of course right after I post that it starts working. No idea WTF was going on before. Now everything works like I would expect it to, even though I’m doing exactly what I have been trying all night lol
Rooted finally. ■■■■ interesting box it is and learnt a lot from this machine. I hope many machines will come like these.
User: Do your homework and see what can be done to make an ordinary file into a reverse shell script. You will be tricked with non working passwords but mysql is with you.
Root: Just see what functionalities are running and just keep going on, here also the previous script will help you.
If you are stuck then feel free to pm!!
Type your comment> @RedDevil09 said:
Rooted finally. ■■■■ interesting box it is and learnt a lot from this machine. I hope many machines will come like these.
But what do if you can’t upload nothing? All other can does it but only not I?
@newrookie said:
Can curl be used to upload the file? I want to use it (-F option not -X POST) cause I don’t know what to post in the request, even if I’m looking at u****d.**p. Any hint?
You dont need to use curl, you can just upload a file.
Spoiler Removed
@fr0ster said:
Type your comment> @RedDevil09 said:
Rooted finally. ■■■■ interesting box it is and learnt a lot from this machine. I hope many machines will come like these.
But what do if you can’t upload nothing? All other can does it but only not I?
If you are struggling to get an attack to upload. Google ways to bypass the problem. One of the first hits is a goldmine of information.
Type your comment> @TazWake said:
@fr0ster said:
If you are struggling to get an attack to upload. Google ways to bypass the problem. One of the first hits is a goldmine of information.
I struggling to upload any file.
Spoiler Removed
@fr0ster said:
I struggling to upload any file.
In addition to the very good advice from @lancelai - start by making sure you can upload a legitimate image file. Get a random jpeg from the internet and see if that works.
If that doesn’t work, you have other problems.
Hey guys. Some of you said they were automating the user process. I already got user and am trying to automate it now before advancing to root.
Mainly for a learning experience since i am fairly new to python and requests 
However i ran into some issues. If somebody is willing to check my (most certainly bad) python code that would be awesome.
Spoiler Removed
Spoiler Removed
Hello guys. i cant upload any file, even a simple image(jpg,png etc). Does anyone has the same problem? It looks like the page refreshes after some time when i hit upload.
Type your comment> @gemagician said:
Hello guys. i cant upload any file, even a simple image(jpg,png etc). Does anyone has the same problem? It looks like the page refreshes after some time when i hit upload.
there is message on the top left corner that your image is uploded…
do you see it…(after uploding)
Hello,
If someone could help me, I need help!
I don’t want to spoil but my Rev shell does not work with the webshell call.
The command liner works as some basics command work.
I did a tcpdump on my host and the reverse connection do not arrive.
I’m able to ping myself from the target however.
I tried a reverse conn using py, py3 php, nc…
I’m clearly stucked…
Thanks in advance
Type your comment> @thescriptkiddy said:
Type your comment> @gemagician said:
Hello guys. i cant upload any file, even a simple image(jpg,png etc). Does anyone has the same problem? It looks like the page refreshes after some time when i hit upload.
there is message on the top left corner that your image is uploded…
do you see it…(after uploding)
thank you for your answer. I solved it. it was some problem with my host’s vpn connection not my vm’s. i turned it off and the problem is gone. thank you very much again.
Spoiler Removed
Type your comment> @Tempuslancien said:
Hello,
If someone could help me, I need help!
I don’t want to spoil but my Rev shell does not work with the webshell call.
The command liner works as some basics command work.
I did a tcpdump on my host and the reverse connection do not arrive.
I’m able to ping myself from the target however.
I tried a reverse conn using py, py3 php, nc…
I’m clearly stucked…Thanks in advance
You can try other shell instead of webshell ?