Wargames.MY CTF 2023

web

Challenge Name	Keywords	Summary
Warmup	php, RCE, LFI	LFI to RCE via PHP PEARCMD
Status	php, k8s, nginx, off-by-slash	Retrieve nginx config file from k8s configmaps
Secret	k8s, HashiCorp Vault	Read secret from HashiCorp vault using the `vault` CLI and using `nginx` off-by-slash