From 8561cc3e0ba85c8b5caa8f792284b9fcfacd4350 Mon Sep 17 00:00:00 2001
From: "nuo.o" <49533950+nuoxoxo@users.noreply.github.com>
Date: Sun, 17 Nov 2024 22:24:51 +0100
Subject: [PATCH] Update README.mdx

---
 level06/README.mdx | 47 +++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 46 insertions(+), 1 deletion(-)

diff --git a/level06/README.mdx b/level06/README.mdx
index ad5417e..8d0179a 100644
--- a/level06/README.mdx
+++ b/level06/README.mdx
@@ -1 +1,46 @@
-# 06 - Todo
+# 06 
+
+Login
+
+```b
+> ssh level06@$(ifconfig|grep 'inet '|awk 'NR==2 {print $2}') -p 4242
+> Password: viuaaale9huek52boumoomioc
+```
+
+Inspect (there are 2 files)
+
+```b
+> file level06
+
+level06: setuid ELF 32-bit LSB executable, 
+Intel 80386, 
+version 1 (SYSV),
+dynamically linked (uses shared libs), 
+for GNU/Linux 2.6.24, 
+BuildID[sha1]=0xaabebdcd979e47982e99fa318d1225e5249abea7, 
+not stripped 
+```
+
+```b
+> cat level06.php 
+
+#!/usr/bin/php
+<?php
+function y($m) {
+  $m = preg_replace("/\./", " x ", $m);
+  $m = preg_replace("/@/", " y", $m);
+  return $m;
+}
+
+function x($y, $z) {
+  $a = file_get_contents($y);
+  $a = preg_replace("/(\[x (.*)\])/e", "y(\"\\2\")", $a);
+  $a = preg_replace("/\[/", "(", $a);
+  $a = preg_replace("/\]/", ")", $a);
+  return $a;
+}
+
+$r = x($argv[1], $argv[2]); print $r;
+
+?>
+```