Skip to content
View loknop's full-sized avatar

Highlights

  • Pro

Organizations

@allesctf

Block or report loknop

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Please don't include any personal information such as legal names or email addresses. Maximum 100 characters, markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Pinned Loading

  1. Solving "includer's revenge" from hx... Solving "includer's revenge" from hxp ctf 2021 without controlling any files
    1
    # Solving "includer's revenge" from hxp ctf 2021 without controlling any files
    2
    # The challenge
    3
    The challenge was to achieve RCE with this file:
    4
    ```php
    5
    <?php ($_GET['action'] ?? 'read' ) === 'read' ? readfile($_GET['file'] ?? 'index.php') : include_once($_GET['file'] ?? 'index.php');