Cyber Talents web challenge Global

4 years ago 195
BOOK THIS SPACE FOR AD
ARTICLE AD

Cyber Talents Global challenge

Hi

its me Moaied AKA Moonlight bug hunter CTF Player from time to time lets go to global challenge

 Global

 Global

Challenge Name:Global

Challenge Description

I think we have mutual things.

and link

when i opened challenge page i see Page parameter when i clicked in >_Nothing

Image for post

Image for post

i tried LFI for see /etc/passwd but its not work we have waf here );

lets try to detect this fucking waf (;

after long time i can’t do it just i have /etc/group && /etc/hosts

Image for post

Image for post

Image for post

Image for post

i cant find flag );

what is the next );

i just copy cybertalents website and paste it in page parameter to test RFI

Resource about RFI

Lol its work and i see cybertalents website in the challenge (:

Image for post

Image for post

lets do this

i tried to upload shell but its not work );

lets go to try to read some internal file (;

lets makes php code for that:

<?php
/* Global Challenges
RFI to RCE */

phpinfo();

?>

i wrote this code in pastebin

Image for post

Image for post

LOL its work lets go to see source code maybe we will get flag over there

heh boy finally (;

Image for post

Image for post

Thanks (;

Facebook

Twitter

Read Entire Article