Type your comment> @MisterBert0ni said:
@Xentropy said:
Am I daft? I’ve enumerated both sites both with custom wordlists and more “standard” ones but I still can’t find where the files get uploaded. I must be missing something really basic. Anyone want to DM me a hint or just drop one here please?This is type of insecure file upload related to extracting file from archive.
Haha, and all this time I figured it was my enumeration failing. Thanks. 