ðŸ–¥ï¸ Challenge / Machine Info
- Platform: vulnhub
- Name / Title: pwnlab
- Difficulty: Hard
- Target OS / Environment: Linux
- Key Vulnerability Focus: LFI / upload bypass / SUID
Walkthrough
- Web: Local File Inclusion (LFI) allows reading PHP source codes.
- Foothold: Bypass file upload checks, trigger execution via LFI.
- Privilege Escalation: Run SUID binary that calls a system command without absolute path, hijack PATH environment variable to execute our malicious script as root.