https://wearethebug.dev/tags/limesurvey/Recent content on WE ARE THE BUGTradecraften-usFri, 08 Dec 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-forgotten/Fri, 08 Dec 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-forgotten/Forgotten is an Easy Linux machine on VulnLab that challenges players to exploit an unfinished LimeSurvey installation by deploying a controlled MariaDB instance to gain admin access. Players then upload a malicious plugin for remote code execution inside a Docker container, discover an environment variable for host access, and escalate privileges by chaining low host access with container root privileges via a setuid binary.