Tags: php-shell
Rating: 5.0
In the Source-Code of the site we can find a hint
``
so i just guessed based on the hind and because its a site where you should upload you homwork `web.zh3r0.ml:7777?page=upload`
which leads to an upload formular
lets upload a php shell and try to access it
`http://web.zh3r0.ml:7777/?page=shell&cmd=ls`
it works! lets find the flag!
After a bit tweaking i got a extendet shell running which i could access by `http://web.zh3r0.ml:7777/?page=pwny`
To see what we are dealing with `ls -la` and we see a bunch of weirdly named folders..
lets search them with `grep -nr 'zh3r0*'` and voilà the flag
## Flag
zh3r0{h3y_d1d_y0u_upl04d_php_c0rr3ct1y???_84651320}