Posted by mcleano on Aug 01
Hi guys,I'm doing a pentest on a friends website that he made for coursework at uni
and i've come to a stop. I've gained access to an administrator account and
have access to a file upload facility which allows me to upload a php file
as there are no checks on the file type but the php file goes into an image
folder which I believe has the 'NoExec' option turned on in the Apache
configuration. The reason I think that is...