+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Help with Laravel hacking with dev mode on (/showthread.php?tid=6247870)
Help with Laravel hacking with dev mode on - cholle_bhature - Jul 28, 2023
I recently found out a fairly big website with it's dev mode on. The website is using Laravel version 6.20.7 and PHP version 7.2.34-18+ubuntu18.04.1+deb.sury.org+1 and Laravel config cached is set to false. I can see the stacktrace powered by Ignition.
This is all I know about the configs right now.
I have tried the laravel debug rce CVE-2021-3129 with no luck as the log file path must be different.
Does anybody know any other exploit that might work?
RE: Help with Laravel hacking with dev mode on - marcus08 - Feb 8, 2024
(Jul 28, 2023 08:16 AM)cholle_bhature Wrote: I recently found out a fairly big website with it's dev mode on. The website is using Laravel version 6.20.7 and PHP version 7.2.34-18+ubuntu18.04.1+deb.sury.org+1 and Laravel config cached is set to false. I can see the stacktrace powered by Ignition.
This is all I know about the configs right now.
I have tried the laravel debug rce CVE-2021-3129 with no luck as the log file path must be different.
Does anybody know any other exploit that might work?
You have to be careful when you chose your exploit code for CVE-2021-3129. Also, finding log file name and path is extremely important. Many of them are buggy. I may help you with it. PM me.