Misc
Last updated
Last updated
Challenge | Link |
---|---|
Everyone always says Python is too slow—so let's speed it up!
nc fast-forward.hsctf.com 1337
In this case, i just focused about function or variable limitation. Through trial and error i found that lambda can "hide" function name and variable name.
To solve this challenge i use lambda to find out class
and function
that we can use for RCE. In this case we can found there is os._wrap_close
by enumerating each index in subclasses. Here is the script i used to automate the process and trigger shell.
Flag : flag{it_would_be_a_shame_if_there_were_a_bunch_of_numbers_at_the_end_2846880189}
I made Python even faster than before!
nc fast-forward-v2.hsctf.com 1337
For fast-forward-v2 i used the same exploit as fast-forward :>
Flag : flag{one_day_i_will_write_a_pyjail_without_unintended_solutions_3421670241}
fast-forward (26 solves)
fast-forward-v2 (22 solves)