web

A gallery challenge where I used SQL injection and path traversal to read the server’s environment

A file upload challenge where I bypassed the extension and MIME type checks using a data URL as the filename

This is a machine that allows you to practise web app hacking and privilege escalation

Challenge showcasing a web app and simple privilege escalation. Can you find the glitch?