Photographer 1
![](/images/titleicon/vulnhub.ico)
· β 3 min read · βοΈ m0nk
This is a fun box where we have to exploit an authenticated file upload vulnerability to get a shell on the machine. The credentials for the authentication to the Koken CMS is revealed in an open file share.