slug: north_pole_repl
title: "North Pole REPL"
description: "A “safe” Python REPL is exposed over TCP by North Pole software developers. You can type Python expressions and get results. The service claims to be sandboxed (restricted builtins), but a helper object is available in the REPL and can be abused to escape the sandbox and read flag.txt."
category: "misc"
points: 700
is_visible: true
complexity: 7
zip: "local"
hints:
  - text: "The REPL claims to be sandboxed. Try small Python expressions and introspection functions to learn what's available."
    penalty_points: 10
flag_plaintext: "CTF{s4f3_r3pl_1s_n0t_s0_s4f3}"
service_webshell: true
service_shell_cmd: "/bin/bash"
service_shell_args: "/entrypoint.sh local"