Tags: bash restricted-bash ctf escape 

Rating:

ssh [email protected] password is:[email protected]

instead of using the ssh command given below I used this one:

>> ssh -t [email protected] "bash --noprofile"

where -t option is to force tty allocation and "bash --noprofile" to bypass ~/.profile on remote login

>> [email protected]:~$ /bin/cat flag.txt