Web - Server

any help ? I’m stuck here

Hello, I’m stuck here too. I’ve tried to perform directory-traversal attack by creating zip, that contains ../../[../](Filename). (U can read about it on exploit-db) Unfortunately, it doesn’t work. Any advice, please!

Ok. You can read files, that was unzipped by the site (check it for .txt, jpeg files). File index.php is not accessible directly. Now, stop crying and recall in your mind: how can you read one file through another one?! (hint: i really don’t know how to perform this task using Windows - that’s why my chair was burned!).

every file that was unzipped by server is readable, except for php extensions.

need to figure out how to run command without using php file...

of course, i’m stucked too

I am stuck at this level. Can someone give me some hint? Thx

you can find some bug-bounty blog that’s related zip-file attack !!
try your best buddyyyy!!!

the "hint" by 0x88suN about windows and his chair being burned—is the dumbest, most worthless hint I’ve ever seen. What is that even supposed to mean?

@0x88suN thanks for the hint man ! (no joke)