You are on page 1of 1

You need to connect to their IP to solve it. I will write the way to solve it here.

Look at the Menu.png to understand what the heck i am talking about

1. nc to the given ip ad port

2. Create a config. After that you receive a Serialized config string ( in my case,
it was:
ISFweXRob24vb2JqZWN0Ol9fbWFpbl9fLkNvbmZpZyB7SVJfc3BlY3Ryb21ldGVyX3RlbXA6ICcnLCBhdXR
vX2NhbGlicmF0aW9uOiAnJywgcHJvcHVsc2lvbl90ZW1wOiAnJywKICBzb2xhcl9hcnJheV90ZW1wOiAnJy
wgdW5pdHM6ICcnfQo= )

3. Exit the menu and decode it. It was encoded in base64. Basic stuff. Mine after
decode:

!!python/object:__main__.Config {IR_spectrometer_temp: '', auto_calibration: '',


propulsion_temp: '',
solar_array_temp: '', units: ''}

In this case, we will use python deserialization attacks


(https://frichetten.com/blog/escalating-deserialization-attacks-python/) to solve
it

You might also like