Thanks to this exploit, I was able to bypass the login with SQL injection. I could not use this to gain RCE though. The reason (I think) that I was not able to escalate from here was that the web app…

SystemWeakness's platform is  dedicated to cybersecurity education and awareness, offering insights into common security vulnerabilities, attack techniques, and risk mitigation strategies. Through articles, tutorials, and security advisories, SystemWeakness offers insights into securing software applications, networks, and systems from cyber threats. Readers can learn about secure coding practices, penetration testing methodologies, and incident response procedures to strengthen their cybersecurity posture and protect against cyber attacks.

System Weakness

A writeup of a CTF challenge that involved scanning ports, brute-forcing, exploiting vulnerabilities in web apps, and finding file upload abilities.

Katana CTF Writeup