DownUnderCTF 2023 - Blind File Read - Real Baby Ruby

Details This is my solution for the Real Baby Ruby challenge from DownUnderCTF 2023. It is overcomplicated but I find it interesting. The challenge was a ruby jail, with the following code: while input = STDIN.gets.chomp do eval input if input.size < 5 && input !~ /`|%/ end If you want the intended solution, here is the author’s writeup: Writeup Solution Limitation We are limited to 4-character ruby commands, and we can’t use the following characters: ` %...

2023-09-18 · 4 min · Hiumee

TFCCTF 2022 - Code Leak Writeup

Challenge files HERE Details This is a challenge I created for TFCCTF 2022 and my intended solution. Description We managed to get access to the source code but we got disconnected before being able to download all of it. There has to be a way to get it… Solution If you play around with the application you’ll get a few prompts Enter your name: Bob What would you like to do?...

2022-10-01 · 3 min · Hiumee