backdoorCTF 2014 - web100-2 writeup
Sunday, 23 March 2014، 03:29 AM
Here's the app's code.
So, the underscore template is provided by the user. It's easy to execute arbitrary js code in the same context normal js code is run.
That's all.
So, the underscore template is provided by the user. It's easy to execute arbitrary js code in the same context normal js code is run.
<%
print(process.env.FLAG);
%>That's all.
