From fadfaafa8794f70f031bd9078e0e4e87077d8dbf Mon Sep 17 00:00:00 2001 From: Twi <31920608+gzavz@users.noreply.github.com> Date: Thu, 18 Apr 2024 21:29:00 +0800 Subject: [PATCH] Update writeup.md --- challenges/web/Status Checker/writeup.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/challenges/web/Status Checker/writeup.md b/challenges/web/Status Checker/writeup.md index b5e0020..c8d1fcc 100644 --- a/challenges/web/Status Checker/writeup.md +++ b/challenges/web/Status Checker/writeup.md @@ -8,11 +8,11 @@ Entering a semi-colon (;) will break the command. We can try to use the payload ![wimg-2](https://github.com/lenebread/GiTxHextech-Challenge-Repo/blob/a0a1f11bace0c0ed057208ff3d3ce65661dfe2af/challenges/web/Status%20Checker/images/wimg-2.png) -We can attempt to use the command ``sudo -l``. We can see that we are able to run any command as sudo without a password as seen in the followings screenshot. +We can attempt to use the command ``; sudo -l``. We can see that we are able to run any command as sudo without a password as seen in the followings screenshot. ![wimg-3]() -We can attempt to use the command ``sudo ls /root/`` to list the root directory. We can see that there is a file called ``flag.txt`` as seen in the following screenshot. +We can attempt to use the command ``; sudo ls /root/`` to list the root directory. We can see that there is a file called ``flag.txt`` as seen in the following screenshot. ![wimg-4]()