[v3701]

I guess the vector attack is LFR (Local FIle Read) via ssrf https://fluidattacks.com/blog/lfr-via-bl...ook-stack/, but I edited the exploit and it didn't work as expected, I still believe that the intended way

[HRS4156453]

I have got bookstack creds:
bob:mYSeCr3T_w1kI_P4sSw0rD

how did you got this ?

Its in Teampass

[v3701]

yes exploit works, modify the script to send payloads with request format, and it'll read file, it's kinda slow, but that's the exploit

[HRS4156453]

New subdomain Unlocked:
vault.checker.htb

XD

[smwhck]

yes exploit works, modify the script to send payloads with request format, and it'll read file, it's kinda slow, but that's the exploit

Can u show me ur changes?

[fazemike]

yes exploit works, modify the script to send payloads with request format, and it'll read file, it's kinda slow, but that's the exploit

Can you explain a little more?

[fr34cker]

https://github.com/synacktiv/php_filter_...le_exploit

[HRS4156453]

did anyone manage to get the otp?

[fr34cker]

anyone got the correct way in? im stuck...

[elburro]

does any one have any way to get foothold is it ssrf?????