INNER CODE UNIT · Python
get_secret
Adamkadaban/CTFs · 1.CTFs/CSAW Red 2020/web/jwt/app.py:8
def get_secret(filename):
f = current_app.open_resource(filename)
secret = f.readline().strip()
f.close()
return secret
# index page
@app.route('/', methods=['GET', 'POST'])
def index():
# if GET request return html
if request.method == 'GET':
return """
<h2>Request access</h2>
<form method=POST>
<input name=filename placeholder=filename>
<input type=submit>
</form>
<a href="flag.txt">flag.txt</a>