Steal My Bitcoin CTF PoC
A Python script, stealmybitcoin_poc.py, is a proof-of-concept (PoC) of a live PHP callback against the Steal My Bitcoin challenge. The script uses the Python standard library to build requests, check for leaks, and record HTTP bytes. It is designed to work with a Docker lab setup with an Alpine PHP 8.4.26 CLI server behind nginx, and is intended to be run on a local machine. The PoC is released as a historical note of the successful live run, and the author encourages others to clean it up or create a better version.
Read the full article at github.com →