[Writeup] Vòng loại WhiteHat Grand Prix 2015: Web150

[sunny]

Nguồn: Evil Genius (http://81glntd.blogspot.com/2015/10/...-whitehat.html)
Cảm ơn các bạn đã chia sẻ.

Details:

Ho Chi Minh City
WEB - 150

http://lab3.grandprix.whitehatvn.com/
http://lab3b.grandprix.whitehatvn.com/ (Mirror)​

A website that we can: Register account, Login, Upload Image, ViewImage.

The idea of this challenge is about the CVE's upload of nginx server which you can easily excute php file via jpg image. Form: URL/.php

Solution:

Upload an image which exploit php code.
Running and capture the flag.

and the FLAG = WhiteHat{65f0afb506cd33b16521fed2af09339825703718}

Thank you for reading!!​