Solve Heal Here…
- find subdomains
- check for lfi
- get creds with lfi
- limesurvey rce
- check for config files
- get user creds
- login via ssh
- check for running services
- check configs again for acl secret
- consul rce for root
Hey, can you please explain how you get LFI. I found the subdomain. Did a directory scan found no endpoints?
on the subdomain you can download files.
1 Like