infraeasy

Recipe

alfactf

Task: SSH access to a Linux system with a cron job running backup script. Solution: Monitor process list to capture encryption password from openssl command line arguments, then decrypt the backup to extract the flag.

$ ls tags/ techniques/
proc_filesystemprocess_monitoringcredential_leakcronopensslmysql_backuplinux
process_list_credential_harvestingproc_cmdline_leak
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]