Solving From SQL injection to Shell III

This exercise covers how to gain access to an administration interface using SQL injection followed by how to get command execution using ImageTragick

PTLAB

PRO

Tier

PTLAB

Hard

PTLAB

1-2 Hrs.

PTLAB

969

PTLAB

Green Badge

Common Mistakes:

Make sure you replace the full netcat command with the score command followed by your UUID: /usr/local/bin/score ....

Online access to this exercise is only available with PentesterLab PRO