Forum Discussion
Mail
Bronze I
11 months agoDependency Confusion
I feel as though I have exploited the vulnerability correctly and have gained RCE onto the server but I lack the sufficient privileges to access the token to complete the lab. I have no idea if I mis...
- 11 months ago
Hey Mail 👋
Thanks for sharing your steps. Based on what you've shown, it doesn't look like you've got RCE on the system yet. The commands you're running are on the Desktop instance of the lab (dependency-confusing-desktop). Once you've got RCE, you'll be the root user, so running "whoami" will output root, not iml-user.
Hope this helps!
TillyCorless
Community Manager
11 months agoHi Mail did any of these replies help to solve your confusion?
If you found a reply useful, please don't forget to mark it as a Solution ✅
Marking a reply as a solution helps other community members to find answers to questions that they may also have. It also confirms to your fellow community members that their reply was helpful! You can accept more than one reply as a solution.