Welcome to noxale’s online python class!!! You can try it for free for a limited time and learn basic programming in python 3. http://chal.noxale.com:8000

The website has three different pages for teaching python 3. The pages are ‘fix the code’, ‘match signature to body’, ‘what the code returns’. We are interested in ‘match signature to body’ class since it allows us to set the parameters for a python 3 function and interprets it.

Let’s check if it is vulnerable.

As you can see, it executed our code and printed 7777777.

Let’s try to list the files under the working directory.

There is an file named FLAG. Let’s try to read it.

The flag is noxCTF{py7h0n_15_4w350m3}.