<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>rce on Osiriz</title><link>https://osiriz.dev/tags/rce/</link><description>Recent content in rce on Osiriz</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Wed, 24 Apr 2024 11:00:00 +0200</lastBuildDate><atom:link href="https://osiriz.dev/tags/rce/index.xml" rel="self" type="application/rss+xml"/><item><title>DDC 2024 Regionals - Challenge 21</title><link>https://osiriz.dev/posts/2024/04/ddc-2024-regionals-challenge-21/</link><pubDate>Wed, 24 Apr 2024 11:00:00 +0200</pubDate><guid>https://osiriz.dev/posts/2024/04/ddc-2024-regionals-challenge-21/</guid><description>We are given the following url: http://toolbox.hkn
Visiting the site we see that it is a toolbox of network diagnostic tools. If we look at the ping tool we can see that we are able to run other bash commands by separating them with a ;: We sadly cant just read the flag: We can see that this is because it is owned by root and only root has read permissions: So lets upload a revshell so then try and privesc from there.</description></item></channel></rss>