Course
This challenge is based on ZX Security's discovery of CVE-2021-33564, an argument injection vulnerability in Ruby Dragonfly. Your goal is to exploit this issue to read the file <code>/myapp/key.txt</code>.
Skills covered
Injection
Operating System
Network
CWE-88
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.
