SEKAI 24 - Funny Lfr

The article explains exploiting a race condition in a Starlette app to bypass os.stat checks, using symlinks, and ultimately retrieving the flag from /proc/self/environ.

August 30, 2024 · 4 min · hxuu

SEKAI 24 - Intruder

Challenge Description n c p s a a o o m t i l e e n v : g t e o s s I r : : n y t : 1 8 r 0 9 u w 0 d e p s e b t o r s l e v x e p s l o i t a t i o n I just made a book library website! Let me know what you think of it! ...

August 27, 2024 · 9 min · hxuu