Nebula - level05 - Directory Permissions

About

Check the flag05 home directory. You are looking for weak directory permissions To do this level, log in as the level05 account with the password level05. Files for this level can be found in /home/flag05. There is no source code available for this level.

Solution

The flag05 has world readable permissions for the /home/flag05/.backup folder. The file backup-19072011.tgz can be read and copied to the current folder. Use tar xzf backup-19072011.tgz to extract the contents of the file. A new .ssh folder is created that contains ssh keys. Use ssh -i .ssh/id_rsa localhost to access the shell for this level.