Commit d672b8b

committed

codys first blog flag0

1 parent 3d9486d commit d672b8bCopy full SHA for d672b8b

File tree

+37

-1

lines changed

+37

-1

lines changed

Lines changed: 3 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -11,6 +11,7 @@`
`11`	`11`	`\| Trivial (1 / flag) \| [A little something to get you started][2] \| Web \| 1 / 1 \|`
`12`	`12`	`\| Easy (2 / flag) \| [Micro-CMS v1][3] \| Web \| 4 / 4 \|`
`13`	`13`	`\| Moderate (3 / flag) \| [Micro-CMS v2][5] \| Web \| 3 / 3 \|`
	`14`	`+\| Moderate (5 / flag) \| [Cody's First Blog][8] \| Web \| 1 / 3 \|`
`14`	`15`	`\| Easy (4 / flag) \| [Postbook][6] \| Web \| 7 / 7 \|`
`15`	`16`	`\| Easy (3 / flag) \| [Petshop Pro][7] \| Web \| 3 / 3 \|`
`16`	`17`	`\| Moderate (5 / flag) \| [TempImage][4] \| Web \| 2 / 2 \|`
`@@ -21,4 +22,5 @@`
`21`	`22`	`[4]: ./tempimage`
`22`	`23`	`[5]: ./micro-cms_v2`
`23`	`24`	`[6]: ./postbook`
`24`		`-[7]: ./petshop_pro`
	`25`	`+[7]: ./petshop_pro`
	`26`	`+[8]: ./codys_first_blog`

Lines changed: 11 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,11 @@`
	`1`	`+# Cody's First Blog`
	`2`	`+`
	`3`	`+## [Flag0](./flag0) -- Found`
	`4`	`+`
	`5`	`+- What was the first input you saw?`
	`6`	`+- Figuring out what platform this is running on may give you some ideas`
	`7`	`+- Code injection usually doesn't work`
	`8`	`+`
	`9`	`+## [Flag1](./flag1) -- Not Found`
	`10`	`+`
	`11`	`+## [Flag2](./flag2) -- Not Found`

Lines changed: 23 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,23 @@`
	`1`	`+# Cody's First Blog - FLAG0`
	`2`	`+`
	`3`	`+## 0x00 Home`
	`4`	`+`
	`5`	`+![](./imgs/home.jpg)`
	`6`	`+`
	`7`	`+## 0x01 Try with Comment`
	`8`	`+`
	`9`	`+Tried XSS, not working.`
	`10`	`+`
	`11`	`+![](./imgs/submit.jpg)`
	`12`	`+`
	`13`	`+As the blog is PHP, try inject with PHP.`
	`14`	`+`
	`15`	+``` php
	`16`	`+<?php phpinfo()?>`
	`17`	+```
	`18`	`+`
	`19`	`+![](./imgs/comment.jpg)`
	`20`	`+`
	`21`	`+## 0x03 FLAG`
	`22`	`+`
	`23`	`+![](./imgs/flag.jpg)`