webeasy

Протокол \"Затмение\" (Eclipse Protocol)

hackerlab

Task: Web challenge with source code (Dockerfile + nginx.conf). Solution: Exploited Nginx alias path traversal vulnerability caused by missing trailing slash in location directive to read the flag file.

$ ls tags/ techniques/
lfipath_traversalsource_code_analysisnginxaliasmisconfiguration
Nginx alias path traversalSource code analysis (Dockerfile + nginx.conf)
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]