Been struggling for ages to get the upload, I used Monospace 30-36 still, it’s not use, I either get an empty
or ‘end of print statement’, got ‘__’ or some other error can anyone help ?Rooted! =D awesome machine hahah
You have to play around with fonts. It is not parsing your underscores “_” properly.
1 Like
Initial Access: My instance was messing up, I had to restart it and it finally worked once I found the app. But before that it sent me down a rabbit hole that’s why it took so long but I would say it was harder than getting root.
Root: It was pretty easy. Had to do your typical privilege escalation enumeration and pay attention to Linux file perm and attributes 
once you can find out where this can be advantageous you should be golden. #Rooted
Words cannot begin to express how happy i am after i got user. My god… this machine … it’s ■■■■
stuck in the file upload part, some tips?
use correct fonts
not adding some “comment” into an image?
Agreed, it is not clear for me how it could be solved with waiting because it will be simply late … Have a feeling that I rooted it in a wrong way. So which way is intended: to wait or not?
Bruh we just giving out big hints like that now?
Try your payloads without the “{{}}” to see how the app is parsing your payload. If it looks all wonky, you have to play around with your fonts.
Hint: Try to play with kerning as well
1 Like
I got it to work yesterday finally, It was the font I had to keep switching between fonts.
2 Likes
Try uploading screenshot.it may help you
hi could you help , pls ?
i am stuck in upload
I have found the domain, and i am trying to find SSTI but I cant find it. I see people talking about fonts and other stuff. I have never done SSTI or anything like that before so please bear with me here. If someone could give me a clue on what to do with the fonts, I would really appreciate it. Otherwise I will keep on trying.
pm me
Hey, anyone could help with the first step???, I use the file with a code, but didn’t work, I get that has not attribute, any idea???
Hi,
I am very new to Penetration and HTB. Need your help with HTB Late machine. I have found the domain but that is not accessible and not able to understand what to do next.
Can you please help me with next step ?
I finally got it! use Freemono with 36 px and gimp to pass the upload part
You need to add the domain name to your hosts file in order to your web browser to be able to redirect to the correct IP.
1 Like