From aac3953a9349abfb29fb1d3cf6a29fca1c174430 Mon Sep 17 00:00:00 2001
From: gopikasubramanian <62986886+gopikasubramanian@users.noreply.github.com>
Date: Fri, 14 Aug 2020 15:58:45 +0530
Subject: [PATCH] Create README.md

---
 2020/Web/Noshake/README.md | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 2020/Web/Noshake/README.md

diff --git a/2020/Web/Noshake/README.md b/2020/Web/Noshake/README.md
new file mode 100644
index 0000000..420d20d
--- /dev/null
+++ b/2020/Web/Noshake/README.md
@@ -0,0 +1,19 @@
+# Challenge Name
+No shake
+
+### Challenge Description
+The admin does not like to shake hands, virus!
+
+### Short Writeup
+The initial request requires the Cmd parameter to be added with a buffer value with length 8 to bypass the mitm attack on STARTTLS (STARTTLS downgrade), all characters and numbers are blacklisted, so we replace with unicodes which would give total length as 8.
+Cmd=								
+
+The final page requires the key to begin, the first problem is strcasecmp bypass by using arrays, second problem is deserialisation with reference variable, third problem is deserialisation to RCE to retrieve the flag. 
+final.php?key=sT4yH0M3&abc[]=sasa&def=O:8:"stdClass":2:{s:4:"flag";N;s:3:"xyz";R:2;}&ghi=O:4:"Dogs":1:{s:3:"obj";O:4:"Cats":1:{s:3:"cmd";s:13:"cat%20final.php";}}
+
+
+### Challenge Author
+m0n574
+
+#### Flag
+inctf{Rc3_n_d0wngr4d35_d0n7_g0_W3Ll:}