Post

Webhacking.kr - web11

Wargame, Webhacking.kr
Posted

web11

1
2
3
4
5
6
7
8

<?php
  $pat="/[1-3][a-f]{5}_.*$_SERVER[REMOTE_ADDR].*\tp\ta\ts\ts/";
  if(preg_match($pat,$_GET['val'])){
    solve(11);
  }
  else echo("<h2>Wrong</h2>");
  echo("<br><br>");
?>

Solution

1
2
3
4

$pat="/[1-3][a-f]{5}_.*$_SERVER[REMOTE_ADDR].*\tp\ta\ts\ts/";
?val=1aaaaa_.*175.194.100.178.*%09p%09a%09s%09s\

online regex editor 등으로 해보면 탭이 안되서 좀 그랬는데 그냥 해보니까 됨.
Wargame, Webhacking.kr
This post is licensed under CC BY 4.0 by the author.