FeedDiscussion
HackTheBox : Void Whispers Writeup
Summary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath field directly into shell_exec("which $sendMailPath") with no escaping. The app only filters literal whitespace, w
exploitnotes.hashnode.dev4 min read
#hackthebox#htb-challenge#ctf-writeup#web-exploitation#command-injection#os-command-injection#php-security#shell-exec#rce#command-execution#blind-command-injection#webhook-site#imput-validation#linux-security#web-security#capture-the-flag
Responses
No responses yet.