An rsync 3.1.2 daemon whose src module exports the whole file system, writable and without authentication, running as root, with cron in the same container.
Not startedDockercommit 759edd4x86_64 · aarch64Secret
Abuse the unauthenticated rsync module to read files, then get a shell on the server.
The brief for this lab lives in its repository.