inframedium

NoSecList

hackerlab

Task: Flask/Gunicorn web app with Loader form. Solution: Password guessing from page content, pickle deserialization RCE, SUID bash -p privilege escalation.

$ ls tags/ techniques/
flaskrcepythonprivilege_escalationgunicornpickle_deserializationsuid_bashpassword_guessingweb_applicationinsecure_deserialization
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]