App - Script

Saturday 28 March 2015, 03:07  #1
App - Script python - input()
th3ss
  • 5 posts

from the source code we know that flag must be a number
if (p == int(passwd)):
so whats the solution?
bruteforcing ??
i read few things about python eval in some builtin functions but no luck on trying them ...
also noticed that on entering numbers it doesnt show error does that worth looking into ??

Saturday 28 March 2015, 03:20  #2
App - Script python - input()
th3ss
  • 5 posts

i just learned that the input is vulneable itself...
so by giving it some python code we can get the flag
NOTE:added for those who dont know how to solve this