Course
This course demonstrates the exploitation of a remote command execution (RCE) vulnerability in Gogs, a tool for hosting git repositories. The attack involves bypassing authentication to gain administrator access and using git hooks to execute commands on the server.
Skills covered
Injection
Authentication
Operating System
CWE-94
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.