challenge.yml

name: "Vulnerability Research"
author: "SteakEnthusiast"
category: Web
description: |
  Inspired by the recent **10.0 CVSS** react2shell vulnerability, Han Shangyan decided to embark on a web application framework auditing journey himself. He stumbled upon this old web framework. Can you help him audit it for any bugs? 

  Note: This challenge involves exploiting a real 0-day. Please refrain from posting writeups or sharing details about the vulnerability publicly until it has been patched by the maintainers.

  Author: SteakEnthusiast
value: 500
type: kubectf

extra:
  initial: 500
  decay: 100
  minimum: 100
  function: aachen
  template_name: vulnerability-research
host: null

flags:
- content: uoftctf{is_this_web2py_or_web2shell?!?!?!!}
  type: static
  data: case_sensitive

files:
- dist/vuln-research.zip

requirements:
    - "Sanity Check"

version: '0.1'