DownUnderCTF 2023 - Blind File Read - Real Baby Ruby

Details This is my solution for the Real Baby Ruby challenge from DownUnderCTF 2023. It is overcomplicated but I find it interesting. The challenge was a ruby jail, with the following code: while input = STDIN.gets.chomp do eval input if input.size < 5 && input !~ /`|%/ end If you want the intended solution, here is the author’s writeup: Writeup Solution Limitation We are limited to 4-character ruby commands, and we can’t use the following characters: ` %...

2023-09-18 · 4 min · Hiumee