Return to forum

Anonymous_Hacker · October 23, 2022 at 4:30 PM

(October 23, 2022, 03:21 PM)Hacker2222 Wrote: web challenge:
ssti in mako templates

thanks

durin93 · October 23, 2022 at 4:30 PM

thanks

HDplus · October 23, 2022 at 4:31 PM

thanks ;)

Meep · October 23, 2022 at 4:33 PM

(October 23, 2022, 04:13 PM)tryingNew1 Wrote:

(October 23, 2022, 03:37 PM)Meep Wrote: A hint for Pwn: p.send(b'\xc9\x07\xcc\x00\x00\x00\x00\x00' + b'
')

pls be more specific

Use pwntools for python3, walk the program. My instructions to get the flag are T -> S -> \xc9\x07\xcc\x00\x00\x00\x00\x00 -> R -> L -> C. Don't forget newlines. Or use something to write the bytes as characters over nc.

QuQuK · October 23, 2022 at 4:39 PM

(October 23, 2022, 03:21 PM)Hacker2222 Wrote: web challenge:
ssti in mako templates

thx

user23112 · October 23, 2022 at 4:40 PM

thanks

daxweavez · October 23, 2022 at 4:42 PM

(October 23, 2022, 03:21 PM)Hacker2222 Wrote: web challenge:
ssti in mako templates

smooth

admin0radmin · October 23, 2022 at 4:53 PM

Thanks!

00hades · October 23, 2022 at 5:02 PM

(October 23, 2022, 03:21 PM)Hacker2222 Wrote: web challenge:
ssti in mako templates
😊

lightspeeder · October 23, 2022 at 5:03 PM

(October 23, 2022, 03:21 PM)Hacker2222 Wrote: web challenge:
ssti in mako templates

Thanks!