Kinoco Hacker Hands-on security practice
All challenges In progress
General Skills Level 2 100 points

Environment Variable Master - PATH Hijacking

Mission

There is a hidden command "getflag" in /app/secret_bin directory. However, this directory is not in PATH, so you cannot execute it directly. Execute this command in two ways: 1. Using absolute path 2. Adding to PATH and execute The command will display the flag when executed.

#environment-variables#PATH#linux#privilege-escalation

Clear it in 3 steps

Not started

  1. Start the environment

  2. Investigate the target

    Available after the environment starts

  3. Submit the flag