Forum Discussion

sargentv's avatar
sargentv
Icon for Bronze I rankBronze I
10 months ago
Solved

World Cup Special - Immersive Squad

need help with this lab , i have bypassed the cookie to login as croatia manger ,  even double encoded ../ to get path traversal payload.  still i am getting empty roster as output, (see image atta...
offensive cyber
  • Anonymous's avatar
    Anonymous
    6 months ago

    Hi sargentv​ You're on the right lines, but try looking in other directories than just the parent directory (aka ..). You may also find absolute paths useful

netcat's avatar
netcat
Icon for Silver III rankSilver III
10 months ago

Depending on the cookie and query string, there are different outcomes (You are...). Do a few different combinations, write the results down, and think about it.

If you still can't find the solution, write them here for discussion.

  • IncognitoBro's avatar
    IncognitoBro
    Icon for Bronze I rankBronze I
    12 days ago

    I am racking my brain trying to figure this lab out. No matter what I try I keep getting blank team lists. I have tried double encoding and everything.

    Any chance of some more guidance?

    **EDIT - Got it. Actually, annoyed how simple that was with another quick Google search on common areas for files to be hosted 🙃