Author | Post | |||
pjsk8 |
@theblacksheep, Sorry to bother, but since you're back, do you think you can work on RHC 3? I've been dying to try this challenge. Thanks. |
|||
26.07.2004 01:19:12 |
|
|||
quangntenemy |
Yes, me too! |
|||
26.07.2004 01:20:17 |
|
|||
BaRa |
same here |
|||
26.07.2004 01:20:27 |
|
|||
r3d5pik3 |
hmm yes i have beaten this challange ...... its prolly to easy for users or *nix i wouldnt think it would be that hard to fix ....... i mean all you have to do is load it to a higher folder then restrict any reverse directory transversal ocournces int the systen() or passthru() call |
|||
26.07.2004 16:57:43 |
|
|||
mxn |
to prevent directory traversal, also the echo command has to be filtered, because it's possible to use octal chars, i.e. ls `echo -e \000 \001 \002` for listing the above directory |
|||
26.07.2004 17:21:37 |
|
|||
theblacksheep |
and any use of fopen and some other nice functions which allow you to open and read files. |
|||
26.07.2004 17:22:19 |
|
|||
mxn |
it's not possible to chroot a directory, is it? |
|||
26.07.2004 17:37:11 |
|