Calculat3 M3

Here! http://web.ctflearn.com/web7/ I forget how we were doing those calculations, but something tells me it was pretty insecure. We can start by performing some basic calculation like 1+1.

Let's check the Burpsuite Proxy > HTTP History.

Now let's send this request to the Repeater.

At the bottom of the request we can see the expression that we inputted.

We can replace the expression with ;ls and send the request.

Flag

CTFlearn{watch_0ut_f0r_th3_m0ng00s3}