koenyskout/toctou repository overview

This image contains an intentional security vulnerability. Use at your own risk.

This image contains a suid program (vulnerable) with a TOCTOU (Time Of Check to Time Of Use) vulnerability. Furthermore, there are two files: normal-file and secret-file. The latter is not accessible to the normal user, only to root. Your goal is to exploit the vulnerability to read the contents of the secret file.