[paven]

Editorial - Linux - Easy

Good luck everyone! Let's tackle this together!
https://app.hackthebox.com/machines/Editorial

[AdenBilal]

will be solving it today only

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[inactive]

any hints/findings for user?

[idrkwhatimdoing]

/upload has pingback on the URL field when hitting preview.

[princecyber]

anyother updates whatever i uploaded its uploading as txt file

[newbi31]

preview gives the url path but file ext is changed even i upload double ext it remove all ext

[a44857437]

The image is unchanged (so no imagemagick on the server) and the preview URL is valid for one request as far as I can see now

[bl4cksku11]

preview gives the url path but file ext is changed even i upload double ext it remove all ext

Same, I'm trying to inject command on the field, but no luck

[BahsbFAISfjhb]

Think the focus is on the cover URL - it grabs your input URL and attempts to display it as an image. Supplying an actual image and re-downloading it through the application doesn't yield any metadata about software in use

[jojo1234]

http://editorial.htb/static/uploads/e6d3...18a612d27f