Skip to content

Commit

Permalink
Update README.mdx
Browse files Browse the repository at this point in the history
  • Loading branch information
nuoxoxo authored Nov 19, 2024
1 parent 8689bba commit 513eb31
Showing 1 changed file with 5 additions and 4 deletions.
9 changes: 5 additions & 4 deletions level12/README.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -53,10 +53,11 @@ n(t(param("x"), param("y")));
```

Solution
- The injected backtick command gets executed by PERL right away
- But why we need to fake the ___allcaps___ filename:
- because program runs fast, both regex tr and pattern matching `=~` operate at almost the same time
- in order avoid asynchronous execution btw steps, we sort if ___continue/delay___ the script a little further
- Backtick command injection ``` `/*/C` ```
- gets executed by PERL right away
- But why still fakinig an ___allcaps___ filename:
- bc. program runs fast, and `tr` and pattern matching `=~` operate at almost simultaneously
- to avoid asynchronous execution btw steps, we sort of ___continue/delay___ the script a little

```b
> echo "getflag > /tmp/tmp" > /tmp/C
Expand Down

0 comments on commit 513eb31

Please sign in to comment.