c0c0n XI DomeCTF Writeup — India — Team RedX!!

  1. The path /tmp/DOMECTF_BASE looks like internal path
  2. The path http://142.93.218.213:12345 will show our team name if we succeeded (this information is already provided)
  3. Looks like we need to get a reverse shell or at least a possibility to execute commands on server for writing the file DOMECTF_BASE
  1. Create a database and a table with one column of type text.
  2. Insert the php code you want to execute into that table.
  3. Choose the previously created table from the left menu.
  4. Click Export from the top menu.
  5. Choose CSV format.
  6. Choose “Text File” and name the file with php extension for example shell.php.

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store