{"id":139980,"date":"2025-08-03T11:11:54","date_gmt":"2025-08-03T09:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostizhenie-vypolneniya-koda-pri-kontrole-nad-tekstom-kommentariya-v-python-skripte"},"modified":"2025-08-03T11:11:54","modified_gmt":"2025-08-03T09:11:56","slug":"dostizhenie-vypolneniya-koda-pri-kontrole-nad-tekstom-kommentariya-v-python-skripte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/dostizhenie-vypolneniya-koda-pri-kontrole-nad-tekstom-kommentariya-v-python-skripte","title":{"rendered":"Arritja e ekzekutimit t\u00eb kodit me kontroll mbi tekstin e komentit n\u00eb skriptin Python","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb nga pjes\u00ebmarr\u00ebsit e konkurrenc\u00ebs UIUCTF 2025, shpjegoi n\u00eb detaje se si ia arriti t\u00eb p\u00ebrmbush\u00eb nj\u00eb detyr\u00eb q\u00eb k\u00ebrkonte ekzekutimin e kodit t\u00eb tij n\u00eb server, duke pasur vet\u00ebm mund\u00ebsin\u00eb p\u00ebr t\u00eb ndryshuar p\u00ebrmbajtjen e tekstit t\u00eb komenteve n\u00eb kod. <\/p>\n

Pjes\u00ebmarr\u00ebsit mund t\u00eb d\u00ebrgonin nj\u00eb k\u00ebrkes\u00eb rrjeti p\u00ebr nj\u00eb skript Python, i cili krijonte nj\u00eb skript t\u00eb ri Python me emra rast\u00ebsor\u00eb, shtonte t\u00eb dh\u00ebnat e pranuara nga p\u00ebrdoruesi n\u00eb tekstin e komenteve, duke hequr karakteret \u00ab\n\u00bb dhe \u00ab\r\u00bb, dhe e nxiste k\u00ebt\u00eb skript me komand\u00ebn \u00abpython3 emri.py\u00bb. Duke kontrolluar vet\u00ebm p\u00ebrmbajtjen e komenteve, pjes\u00ebmarr\u00ebsi duhej t\u00eb nxirrte nj\u00eb varg nga skedari \u00ab\/home\/ctfuser\/flag\u00bb. Skripti krijohej me kodin e m\u00ebposht\u00ebm: comment = input(\u00ab> \u00ab).replace(\u00ab\n\u00bb, \u00ab\u00bb).replace(\u00ab\r\u00bb, \u00ab\u00bb) code = f'''\nprint(\u00abhello world!\u00bb)\n # Kjo \u00ebsht\u00eb nj\u00eb koment. Ja nj\u00eb tjet\u00ebr:\n # {comment}\n print(\u00abThanks for playing!\u00bb)''' <\/p>\n

N\u00eb vend t\u00eb \u00ab{comment}\u00bb, ishin vendosur t\u00eb dh\u00ebnat e pranuara nga pjes\u00ebmarr\u00ebsi, dhe p\u00ebrfundimisht u ekzekutua kodi i m\u00ebposht\u00ebm: print(\u00abhello world!\u00bb)\n # Kjo \u00ebsht\u00eb nj\u00eb koment. Ja nj\u00eb tjet\u00ebr:\n # T\u00eb dh\u00ebnat e pranuara nga pjes\u00ebmarr\u00ebsi t\u00eb gar\u00ebs\n print(\u00abThanks for playing!\u00bb) <\/p>\n

Detyra ishte formuar mbi motivet e nj\u00eb vulnerabiliteti n\u00eb parserin CPython, i cili trajtonte karakterin me kod zero si p\u00ebrfundim t\u00eb vargut (vulnerabiliteti, p\u00ebr shembull, mund t\u00eb p\u00ebrdorej p\u00ebr t\u00eb fshehur veprime keqdash\u00ebse n\u00eb tekstin e komentit). Problemi u zgjidh n\u00eb versionet CPython 3.12.0 dhe 3.11.4. N\u00eb procesorin e p\u00ebrdorur n\u00eb gar\u00eb, vet\u00ebm karakteret \u00ab\n\u00bb dhe \u00ab\r\u00bb hiqeshin, por duke p\u00ebrdorur versionin vulnerab\u00ebl t\u00eb CPython, pjes\u00ebmarr\u00ebsi mund t\u00eb p\u00ebrdorte karakterin \u00ab\u00bb si ndar\u00ebs. Megjithat\u00eb, ky hile nuk funksionoi pasi n\u00eb gar\u00eb ishte p\u00ebrdorur nj\u00eb version i rregulluar i CPython me q\u00ebllimin se mund t\u00eb ishin ende disa gabime t\u00eb ngjashme n\u00eb parser dhe pjes\u00ebmarr\u00ebsit mund t\u00eb ishin n\u00eb gjendje t'i zbulojn\u00eb ato. <\/p>\n

Pjes\u00ebmarr\u00ebsi q\u00eb p\u00ebrfundoi me sukses detyr\u00ebn nuk e k\u00ebrkoi asnj\u00eb vulnerabilitet t\u00eb ri n\u00eb parser, q\u00eb do t\u00eb lejonte ndarjen e vargut n\u00eb pjes\u00eb, por p\u00ebrdori ve\u00e7orin\u00eb e ekzekutimit n\u00eb Python t\u00eb skedar\u00ebve sipas p\u00ebrmbajtjes s\u00eb tyre. P\u00ebr shembull, n\u00eb vend t\u00eb kodit burimor n\u00eb nj\u00eb skedar me zgjerim \u00ab.py\u00bb, mund t\u00eb vendoset bytecode i ruajtur, i cili ruhet n\u00eb skedar\u00eb me zgjerim \u00ab.pyc\u00bb, dhe nj\u00eb skedar i till\u00eb do t\u00eb ekzekutohej. N\u00eb gar\u00ebn p\u00ebrkat\u00ebse, pjes\u00ebmarr\u00ebsi mund t\u00eb kontrollonte vet\u00ebm p\u00ebrmbajtjen n\u00eb mes t\u00eb skedarit, prandaj nuk mund t\u00eb shtonte titullin e tij p\u00ebr t\u00eb shtremb\u00ebruar tipin MIME. <\/p>\n

Problemi u zgjidhjes u arrit duke shfryt\u00ebzuar faktin se Python, q\u00eb nga dega 2.6, mund t\u00eb ekzekutoj\u00eb p\u00ebrmbajtjen e arkivave ZIP p\u00ebr d\u00ebrgimin e pakove Python n\u00eb form\u00eb t\u00eb komprimit. Ashtu si\u00e7 ndodh me pamjen e kodit, prania e arkivit zip p\u00ebrcaktohet nga p\u00ebrmbajtja e tij dhe jo nga shtesa e skedarit, dometh\u00ebn\u00eb, n\u00eb 'file.py' mund t\u00eb vendoset nj\u00eb arkiv zip dhe gjat\u00eb ekzekutimit me komand\u00ebn 'python file.py', ai do t\u00eb p\u00ebrpunohen si nj\u00eb paket\u00eb Python e komprimit. Po ashtu, arkivat ZIP n\u00eb Python indeksohen jo nga kreu i skedarit, por nga seksioni EOCD (End of Central Directory Record) n\u00eb fund t\u00eb skedarit. N\u00ebse n\u00eb arkiv ndodhet skedari '__main__.py', ky skedar ekzekutohet automatikisht gjat\u00eb ekzekutimit direkt t\u00eb arkivit me komand\u00ebn 'python archive'. <\/p>\n

Problemi i konkursit u zgjidh duke gjeneruar nj\u00eb arkiv ZIP t\u00eb ngjash\u00ebm dhe duke e futur at\u00eb n\u00eb tekstin e komentit. P\u00ebr t\u00eb ruajtur korrekt\u00ebsin\u00eb e struktur\u00ebs s\u00eb skedarit n\u00eb kushtet e pranis\u00eb s\u00eb thirrjes 'print('Thanks for playing!')' n\u00eb fund t\u00eb skedarit burimor, u p\u00ebrdor ekzistenca e seksionit EOCD t\u00eb zon\u00ebs s\u00eb komentit, e vendosur n\u00eb fund.

\"Arritja<\/center>
\"Arritja<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0434\u0438\u043d \u0438\u0437 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u044f UIUCTF 2025, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b, \u043a\u0430\u043a \u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u0430\u0434\u0430\u043d\u0438\u0435, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u043c\u0435\u044f \u043b\u0438\u0448\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0432 \u043a\u043e\u0434\u0435. \u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a Python-\u0441\u043a\u0440\u0438\u043f\u0442\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b \u043d\u043e\u0432\u044b\u0439 Python-\u0441\u043a\u0440\u0438\u043f\u0442 c\u043e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0435\u043c, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u0432\u0448\u0438\u0435 \u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0442\u0435\u043a\u0441\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f, \u0432\u044b\u0440\u0435\u0437\u0430\u0432 \u0441\u0438\u043c\u0432\u043e\u043b\u044b «\n» \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":139981,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-139980","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Arritja e ekzekutimit t\u00eb kodit duke kontrolluar tekstin e komenteve n\u00eb skriptin Python | ProHoster","description":"Nj\u00eb nga pjes\u00ebmarr\u00ebsit e gar\u00ebs UIUCTF 2025, analizoi me detaje se si ia doli t\u00eb p\u00ebrfundoj\u00eb detyr\u00ebn q\u00eb k\u00ebrkonte t\u00eb arrinte ekzekutimin e kodit t\u00eb tij n\u00eb server, duke pasur vet\u00ebm mund\u00ebsin\u00eb e ndryshimit t\u00eb p\u00ebrmbajtjes s\u00eb tekstin e komenteve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/dostizhenie-vypolneniya-koda-pri-kontrole-nad-tekstom-kommentariya-v-python-skripte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435 \u043d\u0430\u0434 \u0442\u0435\u043a\u0441\u0442\u043e\u043c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0432 Python-\u0441\u043a\u0440\u0438\u043f\u0442\u0435 | ProHoster","og:description":"\u041e\u0434\u0438\u043d \u0438\u0437 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u044f UIUCTF 2025, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b, \u043a\u0430\u043a \u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u0430\u0434\u0430\u043d\u0438\u0435, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u043c\u0435\u044f \u043b\u0438\u0448\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/dostizhenie-vypolneniya-koda-pri-kontrole-nad-tekstom-kommentariya-v-python-skripte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-08-03T09:11:56+00:00","article:modified_time":"2025-08-03T09:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"139980","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 14:07:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 14:07:19","updated":"2026-01-23 14:07:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/139980","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=139980"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/139980\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/139981"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=139980"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=139980"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=139980"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}