corydolphin

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using Microsoft.ServiceBus.Messaging;
using Microsoft.ServiceBus;


namespace FrontendWebRole
{

corydolphin

See the source of level02.php, the usage of cookies is unsafe as the content is not validated, but merely evaluated.
Substituting an arbitrary file path for the randomly generated path allows you to access files with the permissions of the user running PHP, i.e. level03:

Alter the cookie content to:"../../home/level03/.password"

password: Or0m4UX***
(password redacted so as to not ruin the game for anyone :-) ).

corydolphin

"""
downloadArchives.py: Parses a Mailman Archive site and decodes all of the 
gzipped text archives in mbox format for reading with most popular
email services, or mailbox.py
Usage:   ./downloadArchives.py  [dir] [-f]
Where dir is a directory containing mbox files
If dir is not specified, the output will default to the current working directory
Optionally, the -f flag will overwrite any existing files of the same name as the archives
"""

corydolphin

#!/usr/bin/env python
"""
parseEmail.py: Parses mbox-formatted email boxes for the interesting bits
Usage:   ./parseEmail.py  dir
Where dir is a directory containing mbox files
"""

import mailbox
import os
import sys

corydolphin

#!/usr/bin/env python
"""
mailmanToMBox.py:  Inserts line feeds to create mbox format from Mailman Gzip'd
Text archives
Usage:   ./to-mbox.py  dir
Where dir is a directory containing .txt.gz files pulled from mailman Gzip'd Text
"""
import sys
import os
def makeMBox(fIn,fOut):