Level 8 - Level 9
Last updated
Was this helpful?
Last updated
Was this helpful?
This time also an input field with a link to the source code.
On checking the source code, input keyword/string that we give is directly supplied as a parameter to the grep command, which looks out for matching strings in the dictionary.txt file and returns the output.
So, I tried to get the password for the next level by using the following input value:
; cat /etc/natas_webpass/natas10 ;
Direct link to the solution:
This logic is vulnerable to , since the input is directly substituted in the command and no input sanitization is performed.
