Python3

Python Pitfalls - parse.urljoin

drag_indicator

info

drag_indicator

inputs

drag_indicator

inspect

Python Pitfalls - parse.urljoin

Author: Brumens

Description

It seems that this web application is vulnerable to some strange Python "join pitfall"...

~ Note: To view the setup code for this challenge, click on settings (⚙ icon) located at the top over the tab: INFO.

Goal

Capture the hidden flag located in the file: /tmp/flag.txt

Solution

drag_indicator

waf

INPUT

OUTPUT

drag_indicator

code

drag_indicator

result