An rsync 3.1.2 daemon whose src module exports the whole file system, writable and without authentication, running as root, with cron in the same container.
Pas commencéDockercommit 759edd4x86_64 · aarch64Secret
Abuse the unauthenticated rsync module to read files, then get a shell on the server.
Le brief de ce lab se trouve dans son dépôt.