The following write up is posted here to show how I worked through this on the TryHackMe platform to learn how to gain access to a webserver.
- Task 1 – Getting Started
- Task 2 Introduction
- Task 3: General Methodology
- Task 4: Overwriting Existing Files
- Task 5: Remote Code Execution
- Task 6: Filtering
- Task 7: Bypassing Client-Side Filtering
- Task 8: Bypassing Server-Side Filtering: File Extensions
- Task 9: Bypassing Server-Side Filtering: Magic Numbers
- Task 10: Example Methodology
- Task 11: Challenge
- Task 12: Conclusion
Task 1 – Getting Started
Start the VM and make the changes to your hosts file outlined in task 1.
cd ..
cd etc
sudo nano hostsCopy and paste the information from task 1.
Ctrl-X to exit nano, when prompted hit Y to save then Return to save the file has hosts.
Q1: No Answer Needed.
A1: No Answer Needed.
(more…)