
THM: CupidCards
We leverage command injection, insecure deserialization, and reverse engineer a SUID binary.

We leverage command injection, insecure deserialization, and reverse engineer a SUID binary.

We exploit a web server to hijack sessions, gain remote code execution, and finally escape a docker container.

In this lab we perform a stack buffer overflow exploit on a chat service running on a windows 32-bit machine.