webeasy

Профилировщик (Profiler)

hackerlab

Task: Go web application with /start endpoint hinting at Auth-Token requirement and pprof import. Solution: Access /debug/pprof/cmdline to extract authentication token from command line arguments, then use it to retrieve the flag.

$ ls tags/ techniques/
information_disclosuregolangpprofdebug_endpointcommand_line_argsauth_tokennet_http_pprof
Go pprof debug endpoint exploitationCommand line argument extraction via /debug/pprof/cmdlineAuthentication token discovery
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]