Guilherme Kammsetzer guilhermelimak

The challenge was based on drupal7 with obvious unserialize call added.

Trying to build a chain and the first solution i found was based on following chain:

./includes/bootstrap.inc

abstract class DrupalCacheArray
    ...
    public function __destruct() {
        $data = array();

	import gremlin
	from gremlin.user_plugin import *


	mode = ModeVariable(
	"Mode",
	"The mode to use for this instance"
	)
	joy_1 = PhysicalInputVariable(
	"Physical ON",

	clear

	sensitivity "0.3" # 800 dpi

	// === ALIASES ===
	alias molotov "use weapon_knife;use weapon_incgrenade;use weapon_molotov"
	alias he "use weapon_knife;use weapon_hegrenade"
	alias flash "use weapon_knife;use weapon_flashbang"
	alias smoke "use weapon_knife;use weapon_smokegrenade"
	alias decoy "use weapon_knife;use weapon_decoy"

	# make:
	# Creates a Void Linux docker container with qutebrowser.
	# make run:
	# Runs qutebrowser in aforementioned container
	REPO = http://muslrepo.voidlinux.eu/
	XBPS_INSTALL = usr/bin/xbps-install
	ROOTFS = rootfs
	PACKAGES = base-system-busybox
	PACKAGES += dbus
	PACKAGES += ca-certificates

	# copyright (c) 1993-2009 microsoft corp.
	#
	# this is a sample hosts file used by microsoft tcp/ip for windows.
	#
	# this file contains the mappings of ip addresses to host names. each
	# entry should be kept on an individual line. the ip address should
	# be placed in the first column followed by the corresponding host name.
	# the ip address and the host name should be separated by at least one
	# space.
	#

	Windows Registry Editor Version 5.00

	[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation]
	"RealTimeIsUniversal"=hex(b):01,00,00,00,00,00,00,00