Posted by: Dan O'Connor
logic level 1, smash the stack, smashthestack, smashthestack logic level 1, smashthestack logic level1, smashthestack solution level 1
A couple more things to mention, just running the basic commands from the web page will only give you a single line of output. You could just guess which is what I did or if you really need to see the output of the commands I would redirect them to the upload directory and from there you can view them. The other thing you could have done is uploaded nc directly to the server ( I did not try this, I did not want to break anything) and execute it in to a listening loop against /bin/sh, insta shell. Or you could do the same thing by creating a service.