$ cat writeup.md…
$ cat writeup.md…
hackerlab
Task: Gitea 1.21.11 instance with open registration and admin user whose username hints at the password derivation method. Solution: derived admin password from md5_CODEBY username hint (MD5 of CODEBY), then exploited admin git hooks for RCE to extract flag from environment variable.
Permission denied (requires tier.pro)
Sign in with GitHub or Discord to continue. No email required.
$sign in$ grep --similar