Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Python - 0 bytes cause why not #122

Open
yo-yo-yo-jbo opened this issue Jul 8, 2024 · 2 comments
Open

Python - 0 bytes cause why not #122

yo-yo-yo-jbo opened this issue Jul 8, 2024 · 2 comments
Labels
BGGP Entry Needs Verification This entry needs verification

Comments

@yo-yo-yo-jbo
Copy link

yo-yo-yo-jbo commented Jul 8, 2024

Please fill out the following:

---BEGIN BGGPx---
Submit Date: 2024-Aug-07
BGGP Challenge Number: 5
Author: Jonathan Bar Or ("JBO")
Contact Info (Optional): @yo_yo_yo_jbo
Online Presence (Website/Social Media): @yo_yo_yo_jbo
Target File Type: *.py
File Size: 0
SHA256 Hash: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Target Environment (How do we run the file?): Linux or macOS:
1. Create an empty file: **touch /tmp/a.py**
2. Run with PYTHONSTARTUP from STDIN: **printf "import sys;sys.ps1='';import os;_=os.system('printf \\\\r>/dev/tty && curl https://binary.golf/5/5')\n" | PYTHONSTARTUP=/dev/fd/0 python3 -i /tmp/a.py**
Any additional info?: 
Link to PoC video, screenshot, or console output, if any: 
Link to writeup, if any: 
File contents (base64 encoded please): 
---END BGGPx---

If this is an update to an existing entry, please include a link to your entry below this text. Reminder that authors can only update an entry once during BGGP.

@yo-yo-yo-jbo yo-yo-yo-jbo added BGGP Entry Needs Verification This entry needs verification labels Jul 8, 2024
@mebeim
Copy link

mebeim commented Jul 9, 2024

Why do I feel like BGGP should have a forbidden loopholes policy 😂 LOL

@yo-yo-yo-jbo
Copy link
Author

I agree, IMO everything that uses env vars, relies on path / filename etc cheating. Relying on externals (curl etc) is fine IMO.
Anyway, I saw people really streching the limit and I was like "I'll do ot too".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
BGGP Entry Needs Verification This entry needs verification
Projects
None yet
Development

No branches or pull requests

2 participants