$ cat writeup.md…
$ cat writeup.md…
taipanbyte
Task: PHP web app with user-controlled date format parameter processed in eval/double-quoted string context. Solution: PHP ${} variable interpolation for code injection, chr() to bypass quote restrictions, die() to prevent date() from mangling output, scandir() to find non-standard flag filename.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar