http://r2km7u25qebaefa7b6jdcjldymc2u337vzpx7ne773ypgs3qlq4xycqd.onion/index.php?page=dripping_blues
/cve-2021-4034_x86_64
CVE-2021-4034 - crossbuild by @c3c
Acknowledgements: Qualys, blasty, berdav
Attempting to spawn root shell
# whoami
root With root access, I recovered the root flag: 78CE377EF7F10FF0EDCA63DD60EE63B8 Summary This CTF challenge involved multiple stages: Initial reconnaissance to identify available services Web enumeration revealing potential parameters for file inclusion Discovery of credentials through parameter fuzzing FTP exploration (though ultimately not needed for...