$ ctf42

PharOut

Web weight 22.37 #phar-deserialization
Difficulty Not rated yet

Flag format: flag{...}

Find the vulnerability using the provided source code. Dockerfile included.

Exploit the vulnerability in http://challenges.ctfd.io:30455 to recover the flag. Please, no scanners, brute force, DoS against the live site.

Server is Ubuntu/Apache2/PHP7.4

Writeups

Official

No official writeup linked.

Community

Log in to add a community writeup.