15 lines
729 B
YAML
15 lines
729 B
YAML
slug: north_pole_repl
|
|
title: "North Pole REPL"
|
|
description: "A “safe” Python REPL is exposed over TCP by North Pole software developers. You can type Python expressions and get results. The service claims to be sandboxed (restricted builtins), but a helper object is available in the REPL and can be abused to escape the sandbox and read flag.txt."
|
|
category: "misc"
|
|
points: 700
|
|
is_visible: true
|
|
complexity: 7
|
|
zip: "local"
|
|
hints:
|
|
- text: "The REPL claims to be sandboxed. Try small Python expressions and introspection functions to learn what's available."
|
|
penalty_points: 10
|
|
flag_plaintext: "CTF{s4f3_r3pl_1s_n0t_s0_s4f3}"
|
|
service_webshell: true
|
|
service_shell_cmd: "/bin/bash"
|
|
service_shell_args: "/entrypoint.sh local" |