This lab contains a vulnerable image upload function. It doesn't perform any validation on the files users upload before storing them on the server's filesystem.
To solve the lab, upload a basic PHP web shell and use it to exfiltrate the contents of the file /home/carlos/secret. Submit this secret using the button provided in the lab banner.
You can log in to your own account using the following credentials: wiener:peter
On this page of the site you can watch the video online Remote code execution via web shell upload - APPRENTICE with a duration of hours minute second in good quality, which was uploaded by the user AmirHossein Soltani 09 January 2024, share the link with friends and acquaintances, this video has already been watched 31 times on youtube and it was liked by 0 viewers. Enjoy your viewing!