onetwoseven

TL;DR Edit: nvm got it!
So as many before in this thread I’m struggling with uploading my shell via the special manager. I’ve modified the action to go through m***.p** which includes the --add**.*** and makes the pr**_m**** work by adding a bogus parameter. I get the “File uploaded successfull.y” response but this is where I am utterly stuck. I’ve tried new filenames or overwriting ln.php with the recovered version and a bit extra in the first line. The uploaded file neither appears in root nor in the a*s folder. Playing with burp repeater doesn’t help there either… I still get the successfull.y[sic] message but no cigar. Any help where I am doing it wrong? Locally debugging the code in question I could confirm that the bypass of the wrongly implemented checks has to work and I wouldn’t get “successful” output if it didn’t.

/Edit: nvm got it!