I got @home_assistant to connect to my #PhilipsHue Enrave via Bluetooth from a #synology NAS VM!
Enable "Speech assistant" pairing in the Hue app, then switch the phone to airplane mode and pair home assistant quickly from a second device (e.g. laptop).
The answer is "/flag.txt". With os.path.join, if any component is an absolute path (starting with a / in this case) then everything before it is ignored. Huge security implications if the last component is user-controlled. User can submit /etc/passwd for a potential LFI.
Today marks the usual start of HACKvent - but wait, it started on the 1st Sunday of advent!! Last chance to get full points - join now! Solve this and more upcoming puzzles on https://t.co/xL848Ybz7c!
#hackvent2020