bossplayersCTF:1 walkthrough | vulnhub

for educational purpose only

00:23 - nmap scan
00:55 - decoding base64 encoded text
01:46 - navigating to php file
01:58 - identifying command injection
03:06 - getting reverse shell via nc
04:11 - finding suid file
04:57 - exploiting find suid file and getting root

[elikelik]

Hi. Thanks for writeup. I have a question: here -> find . -exec /bin/sh -p \; -quit
you say find in this directory sh and execute it. Did I right understand? Could you say what does -p \?

[DHIRAL]

It was very hard for me to think about the find command to exploit. Otherwise, it was pretty easy...