Tags: bash restricted-bash ctf escape 

Rating:

ssh catFlag@37.152.181.193 password is:r34lly34syp@55

instead of using the ssh command given below I used this one:

>> ssh -t catFlag@37.152.181.193 "bash --noprofile"

where -t option is to force tty allocation and "bash --noprofile" to bypass ~/.profile on remote login

>> catFlag@ariyan-server:~$ /bin/cat flag.txt