Capture the FlagMedium
Secret in the Process List
Lab for Processes, Services & Packages
Scenario
A backup job runs every few minutes with its API token passed as a command-line argument, a classic mistake, because anyone on the box can see it. Find the running process and read its token.
Objective
Recover a credential a running process foolishly passed on its command line.
lab ~ secret in the process listnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.