insane

pwncollege · Sep 7, 2024 · 86b4c27 · 86b4c27
1 parent d347092
commit 86b4c27
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/input-restrictions/19-next-2.5/run b/input-restrictions/19-next-2.5/run
@@ -0,0 +1,16 @@
+#!/usr/bin/env -iS /opt/pwn.college/bash
+
+PATH=/usr/bin
+
+WORKDIR=$(mktemp -d)
+[ -n "$WORKDIR" ] || exit 1
+cp "$1" "$WORKDIR/dangerous-script.sh"
+cd $WORKDIR
+
+doit() {
+	echo -n ""
+	cat dangerous-script.sh | tr -cd "[\n \-/a-z]" | grep -E "^(echo|read) " > safe-script.sh
+	bash safe-script.sh
+}
+
+doit
diff --git a/input-restrictions/module.yml b/input-restrictions/module.yml
@@ -54,6 +54,10 @@ challenges:
   name: A String of Secrecy
   description: The path to secrets is not always direct. When so, one must first suggest, and only then demand.
 
+- id: "19-next-2.5"
+  name: Internalization of Power
+  description: The power to reach the flag has always been within you. Reach inside and activate it.
+
 - id: "19-next-3"
   name: The Stumble From Safety
   description: A perfect stumble can reveal the path of infinite potential. Is safety binding, or just an illusion?