Create MiniSTRyplace.md

This commit is contained in:
ARZ 2021-04-24 04:40:32 +05:00 committed by GitHub
parent aa45872601
commit 5ee3da1975
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -0,0 +1,27 @@
## MiniSTRyplace
First download the files given in the challenge
<img src="https://imgur.com/yapQG19.png"/>
<img src="https://imgur.com/2JmnHAD.png"/>
Looking at the source code we can see that `../` is replaced by ` `
<img src="https://imgur.com/seSL7JS.png"/>
<img src="https://imgur.com/2ksUbyB.png"/>
We can see that there is a flag but it's not the real so we need to by pass filters to get the `flag`
<img src="https://imgur.com/mG8NPBO.png"/>
It doesn't show , so go one directory back
<img src="https://imgur.com/6iyTWED.png"/>
Here we have a LFI
<img src="https://imgur.com/6ycFmIr.png"/>
And we got the flag !