Forum Discussion

Mail's avatar
Mail
Bronze I
1 year ago
Solved

Dependency Confusion

I feel as though I have exploited the vulnerability correctly and have gained RCE onto the server but I lack the sufficient privileges to access the token to complete the lab. I have no idea if I mis...
help & support
  • NyePrior's avatar
    NyePrior
    1 year ago

    Hey Mail 👋

    Thanks for sharing your steps. Based on what you've shown, it doesn't look like you've got RCE on the system yet. The commands you're running are on the Desktop instance of the lab (dependency-confusing-desktop). Once you've got RCE, you'll be the root user, so running "whoami" will output root, not iml-user. 

    Hope this helps! 

NyePrior's avatar
NyePrior
Icon for Immerser rankImmerser
1 year ago

Hey Mail 👋

Thanks for sharing your steps. Based on what you've shown, it doesn't look like you've got RCE on the system yet. The commands you're running are on the Desktop instance of the lab (dependency-confusing-desktop). Once you've got RCE, you'll be the root user, so running "whoami" will output root, not iml-user. 

Hope this helps!