Сисадмин (Sysadmin)

hackerlab

Task: Linux pentest machine running a hospital website and Webmin panel, requiring root access to retrieve the flag. Solution: Extracted sysadmin username from image EXIF metadata, logged into Webmin with weak credentials, then exploited a SUID binary command injection vulnerability using IFS bypass for privilege escalation.