Directory Traversa vulnerability ctf : HACKTHEBOX OPENSOURCE CTF WALKTHROUGH
OpenSource from hackthebox, we learn web app enumeration, and find credentials and source code in downloadable source zip. We exploit a directory traversal vulnerability to obtain a shell via Flask app, debug pin calculation (failed) and source file overwriting. Accessing a private Gitea instance reveals an SSH key for host access. Exploiting a root-running cron job with Git hooks grants root shell access.
Subscribe for more!
***This is for educational purposes only***, Youtube bot, this is a ctf :)
