# Save peach!

![Screenshot of challenge](https://584771571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGhn0OSf58IrV71Z387bZ%2Fuploads%2FcuGP9Q5MkTSx3yOFS2tv%2Fimage.png?alt=media\&token=f3e733de-d3c3-4c44-abe5-ebfc84aaf454)

### Description

Bowser has kidnapped Peach! Help her break out the python is near! \
\
`nc 159.223.209.120 7778`

### Hint

`__builtins__`\\

### Writeup

Here, from the hint we can get the idea that we have to use python to exploit this, therefore I have tried using different payloads from `__builtins__` and get all the files with `os` and `system` as well.

I have tried to view all the files in the directory and it worked

![get all the files from directory](https://584771571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGhn0OSf58IrV71Z387bZ%2Fuploads%2FmUWeDRduDyMNSsjHOxLs%2Fimage.png?alt=media\&token=f78e96b3-e2ed-413a-a3ee-0fbb54651c39)

tl;dr payload will be `import os; os.system("cat flag.txt")`\\

![final flag](https://584771571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGhn0OSf58IrV71Z387bZ%2Fuploads%2FI7DyQ07kXbMw9OeLAUFu%2Fimage.png?alt=media\&token=57e00517-7b20-46b4-99e9-1cf9098d9745)

### Flag

`EZ-CTF{P34CH_H4S_B33N_S4V3D}`
