How to solve Python Sandbox Capture The Flag challenges?
In this short video I'm showing how to approach python sandbox capture the flag challenges using Google CTF's Treebox task as an example.
This is not a typical writeup! The priority is to explain in more detail about the vulnerabilities and tools that can be used to solve similar tasks.
In this video you can learn how to connect with challenges using netcat, use pwntools library, what kind of interesting things can be found in Python documentation, what is AST and how to think outside the box to step by step build an exploit for a jailbreak challenge.
#jailbreak #capturetheflag #sandbox #writeup #ctf #python #googlectf #netcat #pwntools
00:00 Intro
00:26 Treebox challenge
01:17 Source code analysis
02:12 Using nectat
03:08 Abstract Syntax Trees
03:37 Finding a way to escape
04:26 Using pwntools to write exploit
06:07 Using exceptions
06:55 Final exploit
Hand Drawn icons created by Freepik - Flaticon
Music:
Goat's Skull - Verified Picasso
El Secreto - Yung Logos