$ cat writeup.md…
$ cat writeup.md…
hackerdna
Task: A Flask file reader on a CTF machine exposes absolute paths, while a root cron job executes a writable shell script. Solution: Read shell history for SSH credentials, then append a temporary command to the cron script and restore it after execution.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar