rooted. learned something new for user AND root. Thanks to all for the help along the way!
I had everything perfect for root and it still wouldn’t go, after reset, everything worked fine and I’m even on VIP. So give that a shot if you’re stuck on root and you think it should be going but it’s not.
I am stuck in the back door. Looking at the $t***o. I kinda understand what I am looking at, but not really sure how to call the function or make it work in my favor. Any hints would be awesome.
I managed to nab the user.txt after popping FTP and getting to HTTPS, but haven’t got a useful shell like sh or bash… seems like PHP and Node.js are tightened down from spawning one, but I’m probably missing something. Hints welcomed
EDIT: Got the shell. If you can read certain users’ files, why not pull the files that let you login?
can someone give me hand please. I have used backdoor to get myself details and then generated ct, i can access through https, and look through lfi, worked out hot read files in p*** but i am missing something to get a shell. assistance welcome,
can someone give me hand please. I have used backdoor to get myself details and then generated ct, i can access through https, and look through lfi, worked out hot read files in p*** but i am missing something to get a shell. assistance welcome,
You might want to check some user folders to see if there is something interesting there…
Hi, i’m struggling a little bit finding a way to use $t****, I know that I can use it to get c*.k* in order for me to get a .p** but I don’t know how to work with $t****, any hint ?
Hi, i’m struggling a little bit finding a way to use $t****, I know that I can use it to get c*.k* in order for me to get a .p** but I don’t know how to work with $t****, any hint ?