Realist

Saturday 22 July 2017, 23:27  #1
Realist p0wn3d null byte
nibblesbites
  • 2 posts

anybody knows why the nullbyte is not working in this challenge?

I cannot access system files like /etc/passwd (although this may be due to some restriction like open_basedir), but for example the file:

http://challenge01.root-me.org/realiste/ch6/cmsimple/log.txt

That file exists and returns a 200 OK, although it is empty.

However: http://challenge01.root-me.org/realiste/ch6/index.php?sl=../log.txt%00

Returns: Language file ./cmsimple/languages/../log.txt.php missing

Why is that happening?

Tuesday 25 July 2017, 18:28  #2
Realist p0wn3d null byte
jam
jam
  • 99 posts

hi,
i would advice to reason with material you should understand. (reading code :)

by the way can you help me out in Realist : H4ckers L4b ? i ve seen you did it. I wrote in this forum. (JAM my nick.) thx

Tuesday 25 July 2017, 20:58  #3
Realist p0wn3d null byte
jam
jam
  • 99 posts

hi,

it was quite alright for administrative absence. But really good one, :)