I could really use a hint for getting user.
- I have a low priv shell.
- I have found the script being run by the user.
- I have stared at PHP code for way too long.
- I can escape and run some code as the user
- I don’t get the hint everyone gives about TOUCHING. When using that command I can create a file in the same location as the script is being run from. What am I supposed to do with that?
- I have tried messing a lot with chown and I can get the user flag and get write rights in the directory etc.
- I feel very limited without being able to use / in me code execution.
My brain has turned to porridge at the moment - can you please give a hint on how to proceed with what I have?
EDIT: Okay, so I just got user by some wonky use of chmod, but I don’t belive this is the way people are hinting at?