Posts

Showing posts with the label git

Elfen Ring - Jolly CI/CD Walkthrough

Image
Jolly CI/CD Difficulty Level 5/5 Exploit a CI/CD pipeline. Get hints for this challenge from Tinsel Upatree in the Elfen Ring. After completing Prison Escape Challenge, Upon further climbiung upstairs in the game, we talk to Rippin Proudfoot who asks us to solve an vulnerability in the CI/CD pipeline and we are being asked to exploit the vulnerability and get the ring back. Upon clicking the terminal we are presented with the following information in terminal.  Based on the highlighted text seem like PHP is used and possibly a PHP code-based payload will give us a hand as we progress. And As per the screenshot have already begun enumeration on the like what are the privileges, filesystem & etc.  After talking to Tinsel, we find the following, “With this project, once I push a commit, a GitLab runner will automatically deploy the changes to production.WHOOPS! I didn’t mean to commit that to http://gitlab.flag.net.internal/rings-of-powder/wordpress.flag.net.internal.git...U...

Elfen Ring - Clone with a Difference walkthrough

Clone with a Difference Challenge Difficulty 1/5 Get hints for this challenge from Bow Ninecandle in the Elfen Ring. In the game we go on a boat ride and in the middle you would see Bow Ninecandle near a terminal looking like stuck halfway with something. After conversing we find that we need to help Bow with a git repository and prompted with the below question “ We just need you to clone one repo: git clone git@haugfactory.com:asnowball/aws_scripts.git This should be easy, right ?” Looking at Bow’s git command, its using ssh method to clone the repo and it will only if the right credentials are provided. Unknowing of the credentials we can still attempt to clone the repository using HTTPS method. So modifying Bow’s command to the following below, we have saved the day for Bow :) >> git clone https://haugfactory.com//asnowball/aws_scripts.git