Curling - Writeup

pir4cy · March 30, 2019, 6:08pm

Second writeup

pir4cy/HTB-Writeups/blob/master/Machines/Curling.md

## Info
  * IP: 10.10.10.150
  * OS: Linux
  * Difficulty: Easy

## System Enumeration

### Nmap

![Nmap](boxImages/Curling/nmap.png "Nmap")

### Website

![Website](boxImages/Curling/website.png "Website Main Page")

#### Source Code

Looking at the source code of the main page, we find `<!-- secret.txt -->`
![Source Code](boxImages/Curling/sourceCode.png "Source Code")

This file has been truncated. show original

LordImhotep · April 1, 2019, 9:16am

Cool method of getting a root shell at the end!

pir4cy · April 3, 2019, 1:36am

Type your comment> @LordImhotep said:

Cool method of getting a root shell at the end!

Thanks!