webmedium

Служебный путь (Service Path)

hackerlab

Task: Web application with WebDAV enabled. Solution: JSON disclosure reveals admin creds, WebDAV path traversal uploads PHP shell, sudo command injection escalates to root.

$ ls tags/ techniques/
command_injectionrcepath_traversalwebdavprivescjson_disclosuresudo
php_webshelldirectory_enumerationinformation_disclosurewebdav_putpath_traversal_bypasssudo_privesccommand_injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]