[11231123]

Good luck everyone!

[chillywilly]

something with escaping the encoding of the uploaded file for foothold?

[tests1]

any foothold guys ?

[chillywilly]

I just found a way to leak the name of the other files, but I dunno how to get the content by its name

how are you bypassing the encoding?

[nenandjabhata]

Hey, can everyone Guide me for Foothold user shell ?

[h2m0nRe-d0b1e]

Hey, can everyone Guide me for Foothold user shell ?

fuzz number id this url http://drive.htb/FUZZ/getFileDetail/ and see u file press button

[nenandjabhata]

After SSH to martin, can someone give me any tips of what to search next?

Can you tell me please how you got ssh ? or the shell ?

[h2m0nRe-d0b1e]

After SSH to martin, can someone give me any tips of what to search next?

see listen port and try to login

[nenandjabhata]

I am trying to fuzz but not getting a good answer using my command:
└─# ffuf -u http://drive.htb/FUZZ/getFileDetail/ -w 3-digit.txt -fs 1542,0

[h2m0nRe-d0b1e]

I am trying to fuzz but not getting a good answer using my command:
└─# ffuf -u http://drive.htb/FUZZ/getFileDetail/ -w 3-digit.txt -fs 1542,0

there some functional unReserve, after press button u can see some private files "Select files to unReserve :" , but no can see content their
tips: press Reserve after upload u file and get correctly url for fuzz