Web - Server

Hi all!

I’m trying to solve the SSRF challenge. Without spoiling it, I could exploit the SSRF to run commands as Apache. But I’m not able to escalate privileges to root to read /passwd.

Is privilege escalation part of the challenge or did I miss something?

Are you sure of what are you saying ?

Yes, I know it sounds weird considering the words I used... But I was able to leverage the SSRF to get a shell that runs as Apache. I can execute commands, but don’t have the right permissions to get the flag by reading /passwd.

I sent you a DM with more details :)

Hello,

I am to interesting in what you deed, can you DM me ?
Also it seems you found something but not the expected one in this challenge

best regards