Back to lessonhackingpath / lab
Capture the FlagEasy

Broken Confidentiality

Lab for CIA Triad & Threat Framing

Scenario

The CIA triad starts with Confidentiality, keeping secrets secret. On this box a database backup was left world-readable in /var/backups, so any user can read it. That's a confidentiality failure. Read it and grab the flag.

Objective

Find data that has been exposed to someone who should never see it.

lab ~ broken confidentialitynothing real runs
booting lab sandbox…

This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.