webProeasy

Протокол \"Затмение\" (Eclipse Protocol)

hackerlab

Task: Web challenge with source code (Dockerfile + nginx.conf). Solution: Exploited Nginx alias path traversal vulnerability caused by missing trailing slash in location directive to read the flag file.

$ ls tags/ techniques/
lfipath_traversalsource_code_analysisnginxaliasmisconfiguration
Nginx alias path traversalSource code analysis (Dockerfile + nginx.conf)
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups