lf-

import logging
from pathlib import Path
import time

import requests

MAILGUN_API_KEY = 'key-xxxxx'
MAILGUN_DOMAIN = 'yourdomain.ca'
MAILGUN_FROM = 'dellwatch <[email protected]>'
MAILGUN_TO = '[email protected]'

lf-

writeonly (from github: @lf-)

I participated in the 2020 Google CTF on the UBC CTF team Maple Bacon. Without their help, I would have probably given up out of frustration. Special thanks to Robert and Filip who put up with my many questions and swearing at the computer.

All the files for my solution are available on my GitHub.

lf-

~ » cd dev
~/dev » cd mercury-web-jacked
direnv: loading ~/dev/mercury-web-jacked/.envrc
direnv: using nix
direnv: export +AR +AS +CC +CHROMATIC_PROJECT_TOKEN +CONFIG_SHELL +CUSTOM_META_TAG_IN_DEV +CXX +DETERMINISTIC_BUILD +HOST_PATH +IN_NIX_SHELL +LD +NIX_BINTOOLS +NIX_BINTOOLS_WRAPPER_TARGET_HOST_x86_64_unknown_linux_gnu +NIX_BUILD_CORES +NIX_BUILD_TOP +NIX_CC +NIX_CC_WRAPPER_TARGET_HOST_x86_64_unknown_linux_gnu +NIX_CFLAGS_COMPILE +NIX_ENFORCE_NO_NATIVE +NIX_HARDENING_ENABLE +NIX_INDENT_MAKE +NIX_LDFLAGS +NIX_STORE +NM +NODE_BUILD_MEMORY_LIMIT +NODE_ENV +NODE_PATH +OBJCOPY +OBJDUMP +PYTHONHASHSEED +PYTHONNOUSERSITE +PYTHONPATH +RANLIB +REACT_APP_BACKEND_SOURCE +REACT_APP_BUGSNAG_API_KEY +REACT_APP_BUGSNAG_RELEASE_STAGE +REACT_APP_MERCURY_DOMAIN +REACT_APP_NO_BUGSNAG_REPORT +REACT_APP_PERSONA_ENVIRONMENT +REACT_APP_SEGMENT_KEY +REACT_APP_TEST_BANK_REWRITE +REACT_APP_XERO_OAUTH_2_CLIENT_ID +READELF +SIZE +SOURCE_DATE_EPOCH +STRINGS +STRIP +TEMP +TEMPDIR +TMP +WEBPACK_DEV_SERVER_SSL +_PYTHON_HOST_PLATFORM +_P

lf-

{
  "nodes": {
    "brew-src": {
      "flake": false,
      "locked": {
        "lastModified": 1718075954,
        "narHash": "sha256-4TeUhv5VLEufP+Z/NkKnUk4NUaf59cMsj6NvsVbE+8w=",
        "owner": "Homebrew",
        "repo": "brew",
        "rev": "3f08c75e7b950d4340dab462f3e7f77e8093fa2b",

lf-

(version 1)
(deny default (with no-log))


(define TMPDIR (param "_GLOBAL_TMP_DIR"))

(deny default)

; Disallow creating setuid/setgid binaries, since that
; would allow breaking build user isolation.