Skip to content

Instantly share code, notes, and snippets.

@corydolphin

corydolphin/Stripe CTF level03 solution

Created February 24, 2012 19:11
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save corydolphin/1903046 to your computer and use it in GitHub Desktop.
Save corydolphin/1903046 to your computer and use it in GitHub Desktop.
Download ZIP
Stripe CTF level03 solution
Raw
Stripe CTF level03 solution
See the source of level02.php, the usage of cookies is unsafe as the content is not validated, but merely evaluated.
Substituting an arbitrary file path for the randomly generated path allows you to access files with the permissions of the user running PHP, i.e. level03:
Alter the cookie content to:"../../home/level03/.password"
password: Or0m4UX***
(password redacted so as to not ruin the game for anyone :-) ).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment