PATH Hijacking a SUID Log Rotator: From Tokyo to root
TL;DR
Target/Lab: Berlin's Locker, a 250-point exploitation challenge from the authorized Synchrony CTF R2 / Operation Red Cipher lab environment. Initial access was an SSH shell as tokyo.
Vulnerabil
