JORANI
OFFSEC - Proving Grounds - JORDAK
·1584 words·8 mins
OSCP
OFFSEC PG PRACTICE
JORANI
Jorani v1.0.0 on port 80 vulnerable to CVE-2023-26469, allows path traversal and code execution. User jordak has sudo access to /usr/bin/env, enabling root privilege escalation.