| description |
|---|
Level: Apprentice
- Here in this lab is a simple demonstration of a file upload vulnerability.
- We need to access a file in /home/carlos/secret.
- Try to upload just a single malicious file like is show in the image.
- We see that we can upload php file without any restriction.
- Now to see the content of /home/carlos/secret, use get_file_contents() php function.
- Once uploaded, set the URL and you will see the flag to submit.