Forum Discussion
AdvocateAbusing Trust Boundaries for RCE
I'm a bit stuck on this one as I'm not that familiar with Git and all the associated terminology.
How do I clone the repo?
which dir does the .mcp.json file sit in?
Does this not pre-exist as its adding extra capabilities\extension to the original code?
Does the target host pull the file automatically to give me a shell?
Many thanks - Gus
1 Reply
- SamDickison
Community Manager
Hey GusC, I got a hint for you, that I hope helps:
To clone the repository, use the standard git clone <URL> command in your terminal using the link provided in the lab brief. The .mcp.json file doesn't pre-exist because you are crafting it as your payload; you'll typically need to create it in the root directory of your repo so the target application parses it upon loading. Once you commit and push this malicious configuration, the lab environment will simulate the target victim automatically interacting with your repository, which is what ultimately triggers the execution and drops your shell.
