Nebula Level 05

Nebula 05

Check the flag05 home directory. You are looking for weak directory permissions


In the flag05 folder are two hidden folders. The .ssh we do not have read permission into. However, the .backup folder we do.


In side the .backup folder is a compressed archive. When we look inside we see a backup copy of the .ssh we couldn’t access earlier.


We extract the contents of the archive into our home folder.


We can now ssh into the machine as flag05 using the .ssh credentials.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s