Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Linux-Race Condition. Exploiting a TOCTOU Gap for Root Files
Mission
A cleanup script that root runs periodically has a gap (TOCTOU) between checking and acting on a file. Try exploiting this gap with a well-timed symlink.
Hints
Hint 1 Show
Inspect the contents of a periodic root script such as cleanup.sh
Hint 2 Show
A gap between checking and using a file can indicate a TOCTOU vulnerability
Hint 3 Show
Time the swap of the target file with a symlink to exploit the gap