[slukl]

Hello , please reply to this post to see the user and root short writeup 

how did you get the file /var/www/app-qatesting/.hg/store/data/app.py.i , it is a weird path you know

for me it was enumeration/linpeas but there are several steps before.

• LFI
  
• generating admin-token
  
• SQL-Injection
  

[Shadi]

Thanks a lotK

[JackyChan]

Neat! A bit confusing to follow but it gets you there!

[YuriMakarov]

Thanks mate, appreciate it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Spamming | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[An0nyuncle]

sudo -u dev /usr/bin/hg pull /home/dev/app-production/ throws permission error

[trythis]

thanks for the writeup

[blackheartcrow]

Looking into this to see what it is offering. hopefully it'll be helpful

---

This was super easy to follow and worked wonderfully, i messed up a little at first cause im a bit dumb, but i figured it out.  Thanks a ton!

[sabiri]

thanks but why not a pdf writeup style

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[bakalis]

very nice thnx!

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[025123118081096]

Thank you mate!
This helps my night go by a little quicker, cheers.