HtB - CA2023 - Restricted

HackTheBox Cyber Apocalypse 2023

You ‘re still trying to collect information for your research on the alien relic. Scientists contained the memories of ancient egyptian mummies into small chips, where they could store and replay them at will. Many of these mummies were part of the battle against the aliens and you suspect their memories may reveal hints to the location of the relic and the underground vessels. You managed to get your hands on one of these chips but after you connected to it, any attempt to access its internal data proved futile. The software containing all these memories seems to be running on a restricted environment which limits your access. Can you find a way to escape the restricted environment ?

source_code

Solution

The first thing we notice in the DOCKERFILE is the creation of a user with no password necessary for SSH connections;

After we SSH into the box, we discover we don’t have access to many commands, however, we can still use echo. We’ll use that to display the contents of the directories, and eventually, the contents of the file containing the flag;

Flag HTB{r35tr1ct10n5_4r3_p0w3r1355}