Code 653
RETIRED MACHINE
Linux
Easy
Code
Linux
Easy
4
MACHINE RATING11532
USER OWNS10440
SYSTEM OWNS22/03/2025
RELEASEDMachine Synopsis
Code is an easy Linux machine featuring a Python Code Editor web application that is vulnerable to remote code execution by achieving a Python Jail Bypass. After gaining access as the `app-production` user, crackable credentials can be found in an `sqlite3` database file. Using these credentials, access is granted to another user, `martin`, who has `sudo` permissions to a backup utility script, `backy.sh`. This script includes a section of vulnerable code, which, when exploited, allows us to escalate our privileges by creating a copy of the `root` folder.
Machine Matrix
