Tags: bash restricted-bash ctf escape 

Rating:

ssh [email protected] password is:r34lly34syp@55

instead of using the ssh command given below I used this one:

>> ssh -t [email protected] "bash --noprofile"

where -t option is to force tty allocation and "bash --noprofile" to bypass ~/.profile on remote login

>> catFlag@ariyan-server:~$ /bin/cat flag.txt