From b5b9cf7a1f61d004d7d53584d029c19302c63ba0 Mon Sep 17 00:00:00 2001 From: Aria Date: Sun, 1 Oct 2023 17:23:09 +0100 Subject: initial commit --- punkctf/docker_01.md | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 punkctf/docker_01.md (limited to 'punkctf/docker_01.md') diff --git a/punkctf/docker_01.md b/punkctf/docker_01.md new file mode 100644 index 0000000..33562e8 --- /dev/null +++ b/punkctf/docker_01.md @@ -0,0 +1,6 @@ + +Running `docker images`, we see an image named `challenge` that presumably has our flag. + +We have unrestricted access to the docker daemon running as root, so we can simply make ourselves root inside the container and be able to access everything. `docker run -it --rm --user=0 challenge sh`. + +`cat /root/FLAG`: `punk_{E1U2R3V59WIUZUJI}` -- cgit v1.2.3