@OroJackson said:
@drywaterv2 said:
@prutz said:
Got user, can someone PM how I should’ve found the place to upload? Did some random guess work. Maybe shouldve ran my buster a bit longer?I ran dirbuster, gobuster and dirb, there are only 2 directories (f*** and u*****)
you are ritgh
@prutz said:
@drywaterv2 make sure the format is correct, try to upload a XML without malicious payload first. Also, read carefully.I have the same problem, i uploaded but the page don’t say if the file load successfull or not. how do you know that is working?
If you upload an XML it will always give the internal server error. You’ve got to look inside the page, but i haven’t found anything useful myself