Fading Coder

One Final Commit for the Last Sprint

Decoding a Serialized Pattern with Python’s pickle Module

The puzzle starts at the page with an image and a cryptic instruction: "pronounce it." Viewing the page source reveals a reference to a file named banner.p, alonsgide an HTML comment that reads "peak hell sounds familiar ?" Retrieving banner.p from the server returns what appears...

Exploiting Filtered Pickle Deserialization in a Flask CTF Challenge

Examination of the source code reveals a Flask application exposing a deserialization endpoint vulnerable to remote code execution. The application restricts specific modules and filters payload content, requiring a customized approach to bypass security controls. import builtins import io import sy...