Astronaut 🔹

Enumeration

The web server has a file index with a grav page inside.

Initial Access

Using this exploit exploit.py, we can get a shell.

Privilege Escalation

We have php with the SUID bit set.

Post Exploitation

Get the flag: