Interrupt 0x80

Jolly CI/CD Difficulty Level 5/5 Exploit a CI/CD pipeline. Get hints for this challenge from Tinsel Upatree in the Elfen Ring. After completing Prison Escape Challenge, Upon further climbiung upstairs in the game, we talk to Rippin Proudfoot who asks us to solve an vulnerability in the CI/CD pipeline and we are being asked to exploit the vulnerability and get the ring back. Upon clicking the terminal we are presented with the following information in terminal.  Based on the highlighted text seem like PHP is used and possibly a PHP code-based payload will give us a hand as we progress. And As per the screenshot have already begun enumeration on the like what are the privileges, filesystem & etc.  After talking to Tinsel, we find the following, “With this project, once I push a commit, a GitLab runner will automatically deploy the changes to production.WHOOPS! I didn’t mean to commit that to http://gitlab.flag.net.internal/rings-of-powder/wordpress.flag.net.internal.git...U...

Prison Escape Challenge Difficulty 3/5 Clone a code repository. Get hints for this challenge from Bow Ninecandle in the Elfen Ring. After completing the Clone with a difference challenge , Getting back on the boat and progressing further through the game, we meet Tinsel Upatree with a terminal named “Prison Escape”, once we click on the terminal we are presented with the following screen that details the challenge and Based on the question, we need to find a hex string that contains the flag that needs to be submitted Seems like we need to find a way to privilege escalate or escape from the limited sandbox to be able to complete the challenge. given we can get linpeas transferred to this system, we will have to manually perform initial enumeration. Based on the above screenshot, Seems like some sort of docker container and now ill have to narrow down the enumeration to docker container escape .  Using the following docker container escape reference cheatsheet, while attempting enum...

Clone with a Difference Challenge Difficulty 1/5 Get hints for this challenge from Bow Ninecandle in the Elfen Ring. In the game we go on a boat ride and in the middle you would see Bow Ninecandle near a terminal looking like stuck halfway with something. After conversing we find that we need to help Bow with a git repository and prompted with the below question “ We just need you to clone one repo: git clone git@haugfactory.com:asnowball/aws_scripts.git This should be easy, right ?” Looking at Bow’s git command, its using ssh method to clone the repo and it will only if the right credentials are provided. Unknowing of the credentials we can still attempt to clone the repository using HTTPS method. So modifying Bow’s command to the following below, we have saved the day for Bow :) >> git clone https://haugfactory.com//asnowball/aws_scripts.git