mirror of
https://github.com/AbdullahRizwan101/CTF-Writeups
synced 2024-11-22 20:13:02 +00:00
28 lines
634 B
Markdown
28 lines
634 B
Markdown
|
## MiniSTRyplace
|
||
|
|
|
||
|
|
First download the files given in the challenge
|
||
|
|
|
||
|
|
<img src="https://imgur.com/yapQG19.png"/>
|
||
|
|
|
||
|
|
<img src="https://imgur.com/2JmnHAD.png"/>
|
||
|
|
|
||
|
|
Looking at the source code we can see that `../` is replaced by ` `
|
||
|
|
|
||
|
|
<img src="https://imgur.com/seSL7JS.png"/>
|
||
|
|
|
||
|
|
<img src="https://imgur.com/2ksUbyB.png"/>
|
||
|
|
|
||
|
|
We can see that there is a flag but it's not the real so we need to by pass filters to get the `flag`
|
||
|
|
|
||
|
|
<img src="https://imgur.com/mG8NPBO.png"/>
|
||
|
|
|
||
|
|
It doesn't show , so go one directory back
|
||
|
|
|
||
|
|
<img src="https://imgur.com/6iyTWED.png"/>
|
||
|
|
|
||
|
|
Here we have a LFI
|
||
|
|
|
||
|
|
<img src="https://imgur.com/6ycFmIr.png"/>
|
||
|
|
|
||
|
|
And we got the flag !
|