# Compressor

## OVERVIEW

---

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1759666425097/8a3b89cb-b372-4952-be0b-159e02abda4c.png align="center")

So we were given an instance so let’s start it and head to our attacker machine to nc into it

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1759666483323/f0ea1292-f2c6-4a63-a86f-00825e6c88a5.png align="center")

Here we can see there is a choosing components functionality in which there is a function to create artifact in the form of **zip**

Seeing this I think about zip vulnerabilities but then i thought let’s start from [**GTFO bins**](https://gtfobins.github.io/gtfobins/zip/)

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1759666625148/9b640996-4e49-4669-bddb-e686e96dc42d.png align="center")

Bravo! We got a way to spawn an interactive shell so let’s use it

Let’s Start with creating an Artifact first by choosing option 1

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1759666665190/f784b00f-7cdc-43b0-b493-b7dd8e0c7f99.png align="center")

Artifact is created successfully now choose 3 to compress artifact into zip and enter payload inside it as shown below

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1759666755296/62215470-be6f-4e64-a1e9-28dec11d999f.png align="center")

Here we go We got the shell and also the directory in which we are so just now go to ctf directory and get the flag.txt

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1759666806560/b1ffde41-a55c-40d4-aaa6-71bf94a93614.png align="left")

## **WE FINALLY DID IT !!!! CHALLENGE SOLVED !!**

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1759666859422/a68af448-196f-4df2-aeb4-ec66e09c9a50.png align="center")

For Any Query Or Problem Either Leave A Comment Or Contact At [**reapsec.com**](http://reapsec.com/)

**THANKS FOR READING !!!**