webhard

Царь горы (King of the Hill)

hackerlab

Task: Flask web app with avatar endpoint and password change functionality. Solution: LFI via path traversal in avatar endpoint to read source code, then IDOR in update-password to change admin password and escalate privileges.

$ ls tags/ techniques/
flasklfipath_traversalsource_code_disclosureidorprivilege_escalation
path_traversalsource_code_analysislfi_proc_self_cwdidor_password_change
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]