Forum Discussion
Bronze IIWeb App Hacking (Lab series): CVE-2022-42889 (Text4Shell) – Offensive
I was also now able to complete this lab using a browser, or using curl in a terminal, both work just as well.
By combining the Payload Example in the briefing and the reverse shell command in the referenced blog, I created the new payload. I think the key that prevented success for a long time, was that when using CyberChef to URL encode it, you MUST encode all special characters!
Good luck!
J
Bronze III was also now able to complete this lab using a browser, or using curl in a terminal, both work just as well.
By combining the Payload Example in the briefing and the reverse shell command in the referenced blog, I created the new payload. I think the key that prevented success for a long time, was that when using CyberChef to URL encode it, you MUST encode all special characters!
Good luck!
J
