Skip to content

Instantly share code, notes, and snippets.

@emedvedev

emedvedev/index.cgi

Created September 5, 2015 19:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save emedvedev/125107e9874333c01fbd to your computer and use it in GitHub Desktop.
Save emedvedev/125107e9874333c01fbd to your computer and use it in GitHub Desktop.
Download ZIP
MMA CTF
Raw
index.cgi
#!/usr/bin/ruby
require 'cgi'
cgi = CGI::new
program = cgi['program']
result = ""
message = ""
unless program != ""
message = ""
else
program=program.to_s.gsub("\r","")
if /\A[a-z \r\n]+\Z/ =~ program && program.split("\n").size <= 25
begin
result = eval(program)
rescue Exception => e
message = "Program Error"
end
else
message = "Cannot run the program."
end
end
cgi.out do
<<EOL
<!doctype html>
<html lang="en">
<head>
<title>Alphabet Programming</title>
<link href="http://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css" rel="stylesheet">
</head>
<body>
<div class="container">
<h3>Program</h3>
<div class="span12">
<form method="post" class="form">
<div class="form-group">
<label>Program</label>
<textarea class="form-control" name="program">#{CGI.escapeHTML(program)}</textarea>
</div>
<input type="submit" class="btn btn-primary">
</form>
</div>
<h3>Result</h3>
<div style="color:red;">#{message}</div>
<pre>#{CGI.escapeHTML(result.to_s)}</pre>
</div>
</body>
</html>
EOL
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment