misceasy-medium

Micro Storage v1.0

hackthebox

Task: TCP file storage service with filename filtering. Solution: Tar wildcard injection via --checkpoint-action to achieve RCE by uploading filenames that tar interprets as options.

$ ls tags/ techniques/
command_injectionlinuxgtfobinsfile_storagetarwildcard_injection
tar_wildcard_injectioncheckpoint_action_rce
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]