Hello, may I trouble you for a hint on CTF? I'm at the end. I've found backup.sh. I know I can use it with symlinks to cause root to zip anything even including roots folder. I can't unzip the files due to the password. I can't find any way to expose the $pass variable. Any push you can give would be great!