Web - Server | File upload - double extension
I tried and it works
Good luck !
Web - Server | File upload - double extension
Hello everybody!
As it’s my first post, I’d like to start it by saying a big "thank you" to Root Me, this site is great, and the challenges are really a wonderful learning tool! :D
So, I managed to inject some PHP code here, and I actually printed the content of .passwd!
However, it seems like the challenge is not over yet, and I’m not really sure of what to do next, because I haven’t identified yet the content of this file...
Am I on the right track?
Thank you! :)
EDIT: Actually, I tried again 5 minutes ago, and the SAME THING I got from my first attempt worked perfectly fine... I was probably not fully awake, and forgot to copy something x)
Web - Server | File upload - double extension
Bonjour, j’ai réussi à y mettre un shell mais je ne trouve pas le mot de passe. J’ai trouvé un fichier contenant les identidifiant et location des mots de passe (.passwd) mais impossible de trouver le mot passe.
Avez vous un petit indice à me donner ?
Merci beaucoup
Web - Server | File upload - double extension
Bonjour,
«Énoncé
Votre objectif est de compromettre cette galerie photo en y uploadant du code PHP.
Récupérez le mot de passe de validation dans le fichier .passwd à la racine de l’application.»
L’objectif semble clair pourtant non?