Category: picoGym
-
picoGym – caas challenge Write-up:
Challenge description “Now presenting cowsay as a service” Category: Web Exploitation Link. Link to included file: index.js Solution After downloading the index.js file, this snippet of code stood out It seems like the webapp is executing cowsay straight from the commandline, from the path /usr/games/cowsay. My first thought is to try to pipe the result…