Skip to content

Commit e14ab59

Browse files
authored
Block tomcat logs
Make it harder to bypass the intended challenge flow
1 parent c29aa5f commit e14ab59

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

hackerden/front/network-utils.js

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@ ping = (req,res)=> {
2525
if(hostname.match("FLAG") ||
2626
hostname.match("passwd|shadow") ||
2727
hostname.match("echo|\\bsed\\b|print|base64|\\bxxd\\b") ||
28+
hostname.match("tomcat\/logs") ||
2829
hostname.match("\\b(chmod|rm|mv|cp)\\b")){
2930
console.log(`Bypass attempt with ${hostname}`)
3031
res.status(400)
@@ -103,4 +104,4 @@ ping = (req,res)=> {
103104
};
104105
module.exports = {
105106
ping
106-
}
107+
}

0 commit comments

Comments
 (0)