PHP hack

charcode78
6 years ago

0

Are there PHP hacks similar to HTML hacks from main and basic levels?

Does anyone knows?

8replies

4voices

240views

fred [feuerstein]
6 years ago | edited 6 years ago

0

no it is a different field. You may know that HTML/Javascript is parsed/executed on the client (e.g. your browser) while PHP is executed on the server and the client should not get in contact with it.

But if the question was if there are levels about php… yes I remember one level where the code is given. It was quite fun to do

? [bolofecal]
6 years ago

0

Theres a kind of vulnerability that is possible upload a php file and run your own code in server.

?

charcode78
6 years ago

0

omg

May I ask you where or what is this vulnerability? B)

? [bolofecal]
6 years ago

1

https://www.owasp.org/index.php/Unrestricted_File_Upload
https://www.acunetix.com/websitesecurity/upload-forms-threat/

?

charcode78
6 years ago

0

I just learnt how to use sqlmap. Now I see how to upload those files, e.g:

sqlmap --url="example.org" --file-write "filename" --file-dest "destinationFolder"

Sqlmap is an awesome tool.

Darwin [DIDIx13]
6 years ago

0

Real Level 7 is a whole level about PHP ;)

Message me anytime!

charcode78
6 years ago

0

Does sqlmap works?

Darwin [DIDIx13]
6 years ago

0

I don’t think this challenge is about SQLi but you can still try I haven’t completed it myself.

Message me anytime!

You must be logged in to reply to this discussion. Login