miscmedium

Obezbashenniy (Obez-bash-enniy)

hackerlab

Task: Restricted bash shell with output filtering and broken curl. Solution: Used base64 to read source code, discovered internal Flask service via netstat, bypassed error filter with tr command, and used Python socket instead of broken curl to get the flag.

$ ls tags/ techniques/
flaskrestricted_shellbashoutput_filterinternal_servicenetstatpython_socketcurl_bypasstr_command
Source code analysis via base64 encodingOutput filter bypass using character substitution (tr)Internal service discovery via netstatPython socket as alternative to broken curlHTTP request crafting without curl
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]