こんとろーるしーこんとろーるぶい

週末にカチャカチャッターン!したことを貼り付けていくブログ

2020-02-09から1日間の記事一覧

nullcon HackIM 2020 Writeup - Lateral Movement

CTF

Question Uncover the new path. http://3.12.166.246:3000/ Note: no need to bruteforce tenant. The tenant can be any string. Solution Stage1 URLにアクセスすると、リッチなUIだが静的な画面。 script.jsのbuildActionRequest関数を見ると、/api/1/と…

nullcon HackIM 2020 Writeup - ghost

CTF

Question Ever had a scary feeling when you are alone that there is something in the room, but you cant see it with your eyes alone? Don't be scared to probe at - https://web1.ctf.nullcon.net:8443/ Note: Challenge Is Not Down Solution Stage…