App - Script

Monday 23 January 2017, 23:23  #1
App - Script python input()
ranch
  • 3 posts

on the input() challenge, I know that i can inject the code to retrieve the password, but i do not understand how to change to change the permissions on the file using python or the sys module. I see the vulnerability of the input function itself, but I can not quite figure out how to escalate my privileges to be able to open the file.

any help?

Wednesday 25 January 2017, 16:08  #2
App - Script python input()
Testeur_de_stylos
  • 10 posts

"ls" command should help you ;)

Tuesday 21 February 2017, 18:13  #3
App - Script python input()
ranch
  • 3 posts

solved it! thanks

Thursday 15 March 2018, 14:19  #4
App - Script python input()
Th3_w1ck3d
  • 4 posts

Can you give me more hints please !!

Thursday 15 March 2018, 17:01  #5
App - Script python input()
Manu
  • 1 posts

Hello,
The main hint is on the title "python input()", it means that you should look for vulnerability relative to the input function.
Good Luck