Hack the Temple of Doom (CTF Challenge)
Temple of Doom is a new CTF challenge vm on vulnhub made by 0katz. You can download it from here. The aim of this lab is to capture the flag in root directory of the system. Inspired from the Indiana Jones movie Temple of Doom, the level of this lab is intermediate.
Steps Involved
- Port scanning
- Burp intercept to capture cookies.
- Cookie processing for node serialize RCE vulnerability.
- Getting the current user by RCE.
- Getting a netcat shell for current user.
- Discovering ss-manager being run as root.
- Exploiting command execution vulnerability on ss-manager to get a netcat shell
- Shell crafting from tcpdump and sudo
- Getting a netcat shell as root.
- Grabbing the flag.
Full Article Read here