webProeasy
Echo
spbctf
Task: Echo service with WAF blocking most shell metacharacters. Solution: Use backtick command substitution to bypass WAF and read the flag file.
$ ls tags/ techniques/
waf_bypassbacktick_command_substitution
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Echo v2— web-kids20
- [web][Pro]Ping me— spbctf
- [web][Pro]ls— spbctf
- [web][Pro]P.S. (ping3)— spbctf
- [web][Pro]Grep It All— web-kids20