HackTheBox : Void Whispers Writeup
Summary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath field directly into shell_exec("which $sendMailPath") with no escaping. The app only filters literal whitespace, w
#hackthebox#htb-challenge#ctf-writeup#web-exploitation#command-injection#os-command-injection#php-security#shell-exec#rce#command-execution#blind-command-injection#webhook-site#imput-validation#linux-security#web-security
Responses
Markdown supported · ⌘↵ to post
No responses yet.