Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
Focshole authored Dec 3, 2020
1 parent 5b5ab1f commit 119cefa
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion plaidctf2020/jsonbourne/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ after fuzzying around, we noticed that it allows arithmetic assignment, by provi

Then we used this vulnerability to rewrite `_var_name_i` in such a way that some new variables used in evals would be somehow "double referenced".

We ended up in :
We ended up with this monstruosity :

```
["task _var_name_i=10","var_11","task _var_name_i=10",{"task _var_name_i=13":"=SHELL","var_10":"b"},"concat",{"ta":["ta","aT","task _var_name_i=10",{"task _var_name_i=13":"};cat flag.txt;{","var_12":"b"},"l00p"]}]
Expand Down

0 comments on commit 119cefa

Please sign in to comment.