webPromedium

Безопасное хранилище (Secure Storage)

hackerlab

Task: Web app with file upload and folder creation. Solution: Command injection via catalog parameter using semicolon to chain shell commands, bypassing the red herring of upload filter bypass.

$ ls tags/ techniques/
command_injectionrcephpfilter_bypassfile_uploadshell_injectionmisdirectionred_herringmkdirsemicolon_injection
Command Injection via catalog parameterShell command chaining with semicolonMisdirection recognition (file upload was red herring)
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups