Htb Dark Runes Extra Quality (EXTENDED • Version)

Machine Difficulty: Medium Category: Web, Cryptography, Binary Exploitation, Linux

It reads a file, XOR-decrypts it with a hardcoded key, then executes the output as a shell command if it starts with RUNECMD: . Create a malicious rune file: htb dark runes

Land in /var/www/darkrunes . Find config.py with PostgreSQL creds: db_user: rune_walker , db_pass: s3cr3t_run3s . Access DB: Machine Difficulty: Medium Category: Web