[osamy7593]

can we have sqli so then we can run shell command using sqlite's .shell utility

U found sqli? Sometimes we can get rce

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Asking for rep is not allowed

[drunkp]

can we have sqli so then we can run shell command using sqlite's .shell utility

Is there even input hitting sqlite? not from :3000 anyways

[Anaunimans]

can we have sqli so then we can run shell command using sqlite's .shell utility

Is there even input hitting sqlite? not from :3000 anyways

thats what we need to hunt , might need to use ssrf on 5000

[nomx1337]

Hint for root? Not used to procmon on linux..

I'm thinking about smth like https://bordplate.no/presentations/findi...rocmon.pdf

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[htbtester12]

Anyone got anything useful out of this file: _framework/InternaLantern.pdb?

[sodanger123]

Hint for root? Not used to procmon on linux..

I'm thinking about smth like https://bordplate.no/presentations/findi...rocmon.pdf

Could you give hint about LFI to reverse shell ?

[nomx1337]

lfi to read a component, decompile and recompile it with your shell, then upload it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[drunkp]

lfi to read a component, decompile and recompile it with your shell, then upload it

that sounds... painful

[sodanger123]

Upload in avatar or in vacancies sir ?

[drunkp]

Upload in avatar or in vacancies sir ?

loader is also vulnareable to path traversal it seems