[XAPTAIN]

I now have a www-data web-shell, how should I read the id_rsa using the binary execute_query? id_rsa?

[4ip0k]

Do I need to get the admin role to get www-data?

[plague]

I now have a www-data web-shell, how should I read the id_rsa using the binary execute_query? id_rsa?

how did you get the shell bro?

[nsa_on_tour]

The source code is interesting. Anyone else get the zip file?

[XAPTAIN]

我现在有一个www-data web-shell，我应该如何使用二进制execute_query读取id_rsa？id_rsa？
[/引用]

你是怎么得到壳牌兄弟的？
[/引用]

是的，您必须让管理员获取 www-data

---

[quote="plague" pid='162611' dateline='1695537918']
[quote="XAPTAIN" pid='162572' dateline='1695534747']
I now have a www-data web-shell, how should I read the id_rsa using the binary execute_query? id_rsa?

how did you get the shell bro?

GET /save_game.php?clicks=999&level=99&role/**/=Admin

[plague]

我现在有一个www-data web-shell，我应该如何使用二进制execute_query读取id_rsa？id_rsa？
[/引用]

你是怎么得到壳牌兄弟的？
[/引用]

是的，您必须让管理员获取 www-data

---

[quote="plague" pid='162611' dateline='1695537918']
[quote="XAPTAIN" pid='162572' dateline='1695534747']
I now have a www-data web-shell, how should I read the id_rsa using the binary execute_query? id_rsa?

how did you get the shell bro?

GET /save_game.php?clicks=999&level=99&role/**/=Admin

rooted

[darkmanu]

possible sqli locations in db_utils, but couldnt trigger any?

* function get_top_players via $number (via $threshold in export.php, possible 0x value?)
$stmt = $pdo->query("SELECT nickname,clicks,level FROM players WHERE clicks >= " . $number);

* function save_profile via $setStr via values in quote
  $stmt = $pdo->prepare("UPDATE players SET $setStr WHERE username = :player");

or is this wrong path?

*edit*
nvm - was wrong path. php webshell

how did you get the webshell ?

[hackfxy]

Hi,I want to know how to mount the /mnt/backups/? I use "mount -t nfs -o vers=4 10.10.11.232:/mnt/backups/ ~/",but  return error "Operation not permitted".

[xxxxx]

Hi,I want to know how to mount the /mnt/backups/? I use "mount -t nfs -o vers=4 10.10.11.232:/mnt/backups/ ~/",but  return error "Operation not permitted".

create backups in /mnt (sudo mkdir/mnt/backups) and try: sudo mount -t nfs -o vers=4 10.10.11.232:/mnt/backups/ /mnt/backups

[p4v41jt2]

How i can get jack shell with decompile excute-query file ?

This executable read sql scripts from a custom directory but you don't have permissions on it.

You should try with more arguments (;