Skip to content

Latest commit

 

History

History
19 lines (13 loc) · 478 Bytes

README.md

File metadata and controls

19 lines (13 loc) · 478 Bytes

Calculat3 M3

A simple command injection challenge will be demonstrated in this walkthrough

Here is the challenge page we got after visiting the given link.

I provided random input in this calculator and intercepted the request with BurpSuite

I got one parameter expression taking the values

expression: 8 5 * 6 6 

;ls was used to try to inject commands

After forwarding the request above, it has finally been flagged

ctf{*****_***_***_***_*********}