こんとろーるしーこんとろーるぶい

週末にカチャカチャッターン!したことを貼り付けていくブログ

2019-05-01から1ヶ月間の記事一覧

SECCON Beginners CTF 2019 Writeup

CTF

noranecoは未参加だったので、いつもと違うチームで参加。 Webメイン、CryptとMisc少々解いた。昨年より難しかった印象。 おそらく色々な人がwriteupを書いてくれると思うので、いつもより簡易的な説明に留める。 [warmup] Ramen Question Solution katsudon…

Harekaze CTF 2019 Writeup - [a-z().]

CTF

Question if (eval(your_code) === 1337) console.log(flag); http://problem.harekaze.com:40001 Solution 1337の値を返す、a-z().の文字種かつ200文字未満のJavaScriptコードを作成できたらフラグがゲットできる問題。 環境はNode.jsのvmモジュール。 if (…

DEF CON CTF Qualifier 2019 Writeup - ooops

CTF

Question On our corporate network, the only overflow is the Order of the Overflow. attachment: info.pac eval((function(){var s=Array.prototype.slice.call(arguments),G=s.shift();return s.reverse().map(function(f,i){return String.fromCharCod…

DEF CON CTF Qualifier 2019 Writeup - cant_even_unplug_it

CTF

Question You know, we had this up and everything. Prepped nice HTML5, started deploying on a military-grade-secrets.dev subdomain, got the certificate, the whole shabang. Boss-man got moody and wanted another name,we set up the new names a…

INS'hAck 2019 Writeup - xHell

CTF

コンテスト終了間際にチームが追い込みをかけていたので、適当に残ってたREV問にチャレンジしたら解けた。 雑すぎる解き方で作問者に申し訳ない。 Question This is what happens when you let a manager create challenges for INS'hAck. If you don't have…

INS'hAck 2019 Writeup - atchap

CTF

Question This is a message to all ATchap employees. Our new communication software is now in a beta mode. To register, just enter you email address, you'll receive shortly the activation code. https://atchap.ctf.insecurity-insa.fr Solution…

TSG CTF 2019 Writeup - Obliterated File, Obliterated File Again

CTF

Obliterated File Question ※ This problem has unintended solution, fixed as "Obliterated File Again". Original problem statement is below. Working on making a problem of TSG CTF, I noticed that I have staged and committed the flag file by m…

TSG CTF 2019 Writeup - Secure Bank

CTF

Question I came up with more secure technique to store user list. Even if a cracker could dump it, now it should be of little value!!! http://34.85.75.40:19292/ ユーザ情報を保存するのに、もっとセキュアな方法を思いついた気がしなくもない。 …

CSA CTF 2019 Writeup - Linux 2

CTF

Question ssh user@35.231.176.102 -p1774 Password: utsacyber Solution user@7ab7e9c7f6a4:~$ ll total 32 drwxr-xr-x 1 user user 4096 Apr 27 14:35 ./ drwxr-xr-x 1 root root 4096 Apr 22 20:12 ../ -rw-r--r-- 1 user user 220 Aug 31 2015 .bash_log…

CSA CTF 2019 Writeup - Web(全問)

CTF

CSA CTF 2019のWeb問を全完したのでWriteupを書く。難易度はかなり易しめ。 CSA Database 1 - Suspicious member Question Solution CSA Database 2 - Darkest Secret Question Solution CSA Portal Question Solution The Outer Space Question Solution Hu…