Web - Server

Saturday 4 May 2024, 01:04  #1
Flask - Development server
destiny
  • 1 posts

I have all the data needed to run an exploit script, except for the full path to a certain file. I know the version of python running, but the d****p******* dir isn’t there.

I’ve tested running my own flask app and have run the code to get that path. The path output is a tiny bit different but doesn’t make a difference in my search. I have read env vars too but there wasn’t anything too interesting there.

Do I need to guess/brute-force the path to the file, or am I missing something to easily find it? Thanks.

Monday 13 May 2024, 17:52  #2
Flask - Development server
pon4ik
  • 5 posts

Hi!

You are on the right way. And it is possible to find the path out without brute force, the path is kind of specific for the task’s environment (just have spent for the very same problem couple of hours)

Good luck

Sunday 19 May 2024, 00:47  #3
Flask - Development server
skut
  • 1 posts

Hello,

Same problem, I can’t find the path to this file, i have the version of python and the s*** p******* directory but nothing in it,

Do i’m on the good way or totally out ?

EDIT: found, not the good one...

Thx