A friend has a site hooked up to a server with an admin login, she isn’t sanitizing input, she thinks it doesn’t matter because she doesn’t have a database. The site is an interface to her server to run script files. She gave me permission to try to hack it for educational purposes. Advice, please?
Rules: I can’t delete any files, or add any malware. I’m not going to share the site so don’t ask.
submitted by /u/reader212
[link] [comments]