Late Walkthrough

Which tool was used to monitor running processes?

• pspy

• wireshark

• nmap

• Burp Suite

Which vulnerability was initially exploited?

• SQL Injection

• XSS

• SSTI

• HTTP Request Smuggling

Which tool was used to create the images that were uploaded?

• Gimp

• ImageMagick

• Photoshop

• Tux Paint

Which payload was used to test for the SSTI vulnerability?

• Foo: xGET /home HTTP/1.1

• ' OR 1=1 --

• <script>alert(1)</script>

• {{ 7 * 7 }}

What was the name of the tool used to assist with privilege escalation?

• Linpeas

• Winpeas

• LinEnum

• Smashed Potato