This has got to be one of the hardest box I've attempted because of the heap exploitation.
Write-ups of retired machines
Awesome write up - as always!
This box nearly broke me. It started off hard and every single step got harder. Love the clarity around how you've described the final exploit - mine was a total mess as I tried all kinds of stupid things!
Happy to help people but PLEASE explain your problem in as much detail as possible!
Fine exploit for root but I would use ssh for remote exploitation.
You already have ssh key at this moment and ssh doesn't demand upload and use socat.
Click here to create an account.