TryHackMe - Upload Vulnerabilities - Walkthrough
Introduction Today we're going to be doing a walkthrough for the Upload Vulnerabilities room hosted at https://tryhackme.com/room/ uploadvulns . For this walkthrough, we'll be using two virtual machines (VMs), the TryHackMe AttackBox VM as our attacking machine, and the deployed vulnerable web host as the the victim machine. Task 1 - Getting Started Questions: Configure your hosts file for the task, as per the instructions above. No answer needed (unofficial) echo “10.10.21.116 overwrite.uploadvulns.thm shell.uploadvulns.thm java.uploadvulns.thm annex.uploadvulns.thm magic.uploadvulns.thm jewel.uploadvulns.thm” | sudo tee -a /etc/hosts Task 2 - Introduction Questions Read and understand the above information. No answer needed Task 3 - General Methodology Questions Read the General Methodology No answer needed Task 4 - Overwriting Existing Files Questions What is the name of the image file which can be overwritten? In Firefox , navigate to the following URL: http://o...