[osamy7593]

can we have sqli so then we can run shell command using sqlite's .shell utility

U found sqli? Sometimes we can get rce

[drunkp]

can we have sqli so then we can run shell command using sqlite's .shell utility

Is there even input hitting sqlite? not from :3000 anyways

[Anaunimans]

can we have sqli so then we can run shell command using sqlite's .shell utility

Is there even input hitting sqlite? not from :3000 anyways

thats what we need to hunt , might need to use ssrf on 5000

[nomx1337]

Hint for root? Not used to procmon on linux..

I'm thinking about smth like https://bordplate.no/presentations/findi...rocmon.pdf

[htbtester12]

Anyone got anything useful out of this file: _framework/InternaLantern.pdb?

[sodanger123]

Hint for root? Not used to procmon on linux..

I'm thinking about smth like https://bordplate.no/presentations/findi...rocmon.pdf

Could you give hint about LFI to reverse shell ?

[nomx1337]

lfi to read a component, decompile and recompile it with your shell, then upload it

[drunkp]

lfi to read a component, decompile and recompile it with your shell, then upload it

that sounds... painful

[sodanger123]

Upload in avatar or in vacancies sir ?

[drunkp]

Upload in avatar or in vacancies sir ?

loader is also vulnareable to path traversal it seems