HTB: UpDown
Linux machine chaining a leaked custom header from an exposed .git repo, a phar-wrapper file upload bypass with disabled-function evasion, a Python 2 input() SUID exploit, and sudo easy_install for root.
HTB: UpDownLinux machine chaining a leaked custom header from an exposed .git repo, a phar-wrapper file upload bypass with disabled-function evasion, a Python 2 input() SUID exploit, and sudo easy_install for root.