🔒Bitcoin Key Hidden on Server, Worth $500
A $500 Bitcoin Key Awaits the Hacker Who Can Crack It
TL;DR
A Bitcoin key worth $500 is hidden on a server with a PHP user account that's older than the PHP2SHELL CVEs. The first to hack it wins.
A Bitcoin key worth $500 is hidden on a server, accessible only through a PHP user account running an outdated version of PHP, making it vulnerable to PHP2SHELL CVEs. This hackathon-style challenge highlights the risks of running outdated software and the potential rewards for skilled hackers. The key is accessible through the print-flag binary, but only if the hacker can exploit the outdated PHP version. The first person to successfully access the wallet wins, with the option to donate the winnings to charity. This challenge serves as a stark reminder of the importance of keeping software up to date and securing servers properly. The PHP version is older than the PHP2SHELL CVEs, making it a prime target for exploitation.
Key Points
Bitcoin key worth $500 hidden on server with PHP user account.
Server runs PHP version older than PHP2SHELL CVEs, making it vulnerable.
First person to access the wallet wins the $500 Bitcoin key.
Wallet can be donated to those in need at givewell.org.
Key is accessible through the print-flag binary on the server.
Why It Matters
If you're running an outdated PHP version on a server, this challenge highlights the risks. The PHP user account with access to the print-flag binary is a critical vulnerability. Smaller teams or developers managing their own servers should update PHP to avoid similar issues.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,567 builders reading daily.