script25: Writeup for Misc/Modulo
Python jail challenge exploited via getattr, circumventing AST and character restrictions, dynamically generating numbers and strings with %c achieving remote code execution.
Python jail challenge exploited via getattr, circumventing AST and character restrictions, dynamically generating numbers and strings with %c achieving remote code execution.
Challenge Description n c p a a a o u m t i t e e n h : g t o o s r f r : : i y l : 4 N e 7 o w 8 o s e b h b M a a r e s i x t n p e g l r o p i + o t r a N t t o a i o l o b n H a c k e r Welcome to the file sharing portal! We only support tar files! ...