@deadbear said:
I’ve found where I can upload, and where my uploaded stuff goes to. I have not been able to get RCE from there though. When I bypass the upload filter a few different ways I just get 404 at their destination, or non executable payloads. Any hints on what I might be missing, would appreciate any guidance.
same situation here, can someone pm me for help ?
Perhaps others found different solutions, but what worked for me was not trying to bypass the filter at all. I Just uploaded the file it will accept and put minimal code into that file.
For those who are struggling to get the initial foothold, be assured that I struggled for a very long time to get user on this box, and it was a great learning experience. If you’ve enumerated enough, the clues given in this forum are enough to get you there.
some PM me which mfsvenom or reverse shell i have an idia of how to but i am having bad luck uploading the payload tried too many… some PM with hints thank s
Rooted! That was a really fun initial shell! If you’re struggling with privesc, take a step back and don’t over complicate it! Google has the answer, enumerate more
@wildkindcc said:
Rooted! That was a really fun initial shell! If you’re struggling with privesc, take a step back and don’t over complicate it! Google has the answer, enumerate more
@laylow That part is frustrating. You only have about a 30 second window to get in before it gets overwritten. This box is best attempted in the middle of the day when people are at work.
@C3PJoe said: @laylow That part is frustrating. You only have about a 30 second window to get in before it gets overwritten. This box is best attempted in the middle of the day when people are at work.
man i am from australia so i can only attemp when this time. problem is i get to start to work with australians any team australians around at all…
also man you are 100% right mate… soo frustrating i loud my files get to inside server threw the web interface i got both username but i can’t get inside the folders even tho i have even changed the password for both users i dont get enough time to do it cos asson i go for some friking crushs or overs right the stupid file. i can,t even get chance to uploude a excutible file can’t netcat also cos it crushs by the time i finsih all my staff can you pm what payloud you using i tried to open session but it just fails
got user but i can’t get seccond session because some how million people are uploading staff and session keeps dieing on me… so ill try privac root user later… guess.