Task 1: VulnNet: dotpy
Yes, VulnNet Entertainment is back, and now security-focused. You are once again tasked to perform a penetration test including a web security assessment and a Linux security audit.
- Difficulty: Medium
- Web Language: Python
This machine was designed to be a bit more challenging but without anything too complicated. A web application will require you to not only find a vulnerable endpoint but also bypass its security protection. You should pay attention to the output the website gives you. The whole machine is Python focused.
Note: While looking through web pages you might notice a domain vulnnet.com, however, it's not an actual vhost and you don't need to add it to your hosts list.
Icon made by Smashicons from www.flaticon.com
Answer the questions below
- What is the user flag? (user.txt)
What is the root flag? (root.txt)
