Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
Bootvis
on Aug 30, 2012
|
parent
|
context
|
favorite
| on:
Stripe CTF Writeup
I can't check it right now but I do wonder whether /dev/null as a filename would have worked.
Does somebody know?
e12e
on Aug 30, 2012
|
next
[–]
I guess it would've. I tried to think of stuff that lives under /etc mv -- didn't think of /dev/null. However the "empty filename fall trough" is better as it also works under a chroot without such files available.
Bootvis
on Aug 30, 2012
|
parent
|
next
[–]
Agreed, and I used it but I was really surprised that it worked!
bithive123
on Aug 30, 2012
|
prev
|
next
[–]
You could also pass it nothing, e.g. ?filename=&attempt=
bct
on Aug 30, 2012
|
prev
[–]
Yes, I used /dev/null.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
Does somebody know?