VaultBreak CTF Challenge
Hey Ninja,
Welcome to VaultBreak, the Struts2 vulnerability CTF challenge! In this challenge, you will be exploiting a known vulnerability in the Struts2 web application framework to retrieve a secret flag hidden on a fictitious company's website. The challenge is rated as intermediate difficulty and is designed to test your knowledge of web application security.
Challenge Objective
The objective of this challenge is to find a page on the SafeVault website that includes the Struts2 tag <s:a> or <s:url> with the includeParams attribute set to "all", and use this vulnerability to execute arbitrary commands on the server and retrieve a secret flag. The flag is in the format SNA{<random_string>}.