HTB: Popcorn
Linux machine bypassing a torrent hosting site’s file upload filter via a Content-Type header change to get a PHP webshell, then exploiting a PAM file-tampering vulnerability for root.
Linux machine bypassing a torrent hosting site’s file upload filter via a Content-Type header change to get a PHP webshell, then exploiting a PAM file-tampering vulnerability for root.