LoRexxar's Blog

Hduisa_ctf_writeup02

2015/02/26

WEEK30x01鍋氫笉鍑烘潵涓嶈鐜〤TF绯诲垪涔嬩簩

杩欓亾棰樼畻鏄瘮杈冨熀纭鐨勯鐩畻鏄患鍚堟ф瘮杈冨己鐨勭畝鍗曢鐩紝棰樼洰鐨勫ぇ鎰忔槸璇磃lag鍒嗕负3娈碉紝娑夊強鍒扮紪鐮佽烦杞互鍙婁俊鎭敹闆嗚兘鍔涳紝鎵浠ユ槸涓閬撴瘮杈冩湁鎰忔濈殑棰樼洰銆

绗竴娈礷lag锛屾槸涓娈甸潪甯稿鏄撳拷鐣ョ殑flag锛屼絾鏄粩缁嗗鎵惧悗鍙互鎵惧埌锛屽湪鍝嶅簲澶翠俊鎭噷锛屽彲浠ユ壘鍒拌繖涓閮ㄥ垎flag鈥

绗簩娈礷lag闈炲父鐨勬湁鎰忔濓紝浠旂粏瑙傚療鍒濆椤甸潰鐨勬簮浠g爜涔嬪悗锛屽彲浠ラ潪甯告竻鏅扮殑鍙戠幇椤甸潰鍦ㄧ偣鍑诲悗浼氬彂鐢熻烦杞


浜庢槸杩欓噷鎯冲姙娉曢樆姝㈣繖涓烦杞紝鎴戜娇鐢ㄧ殑浠嶇劧鏄痜irefox鐨則emper data鎻掍欢锛岄樆姝㈣烦杞悗鍙互鐪嬪埌涓涓櫧鑹茬殑鐢婚潰锛屽彂鐜颁細闀块潪甯哥尌鐞愮殑鎶婂瓧浣撹缃垚浜嗙櫧鑹测

Get flag2!

杩欓噷杩樻湁涓ょ鐩稿綋绠鍗曠殑鍔炴硶锛屾彁渚涘湪娌$敤宸ュ叿鏃堕樆姝㈢綉椤佃烦杞
1.鏀瑰彉internet璁剧疆锛屽湪瀹夊叏鈥>鑷畾涔夎缃妸META TEFRESH绂佺敤锛屽氨鍙互闃绘璺宠浆銆

2.濡傛灉浣犺寰椾笂闈㈢殑鍔炴硶閮藉お楹荤儲锛屽氨鎵嬪姩闃绘鍚э紝鐪肩柧鎵嬪揩灏卞ソ.

绗笁娈礷lag姣旇緝鐗规畩锛屾槸涓涓插叧浜庯紙銆恵鐨勭壒娈婄鍙凤紝寮濮嬬湅鍒版垜鐩存帴鎳典簡锛屽悗鏉ラ棶杩囧闀夸箣鍚庡緱鐭ユ妸杩欎覆瀛楃鎷栧幓鐧惧害锛屽氨鍙互寰楀埌绛旀.

涔熷氨鏄繖涓綉绔http://www.cnblogs.com/pandora/archive/2010/02/27/1674833.html

涓嶅緱涓嶆壙璁よ繖绉嶆柟寮忕殑澶╂墠涔嬪

澶嶅埗绮樿创锛実et flag3锛

Flag get锛

WEEK3_0x02_SQLI绯诲垪涓

WEEK3_0x03_SQLI绯诲垪浜

涓婇潰鐨勪袱閬撻鍙堟槸灞炰簬sql鐨勭郴鍒楋紝鏃犲鏀惧純锛岃繖閲岃创涓婂埆浜虹殑writeup鈥

http://lazysheep.cc/2015/02/07/0x11/

WEEK30x04鍋氫笉鍑烘潵涓嶈鐜ヽtf涔嬩笁

杩欓亾棰樹笉寰椾笉璇达紝缁濆鏄細闀垮煁涓嬬殑鍧戯紝鎵撳紑鐪嬪埌鎻愮ず锛屽緱鐭ユ槸get id=锛燂紝鍒濆紑濮嬩互涓烘槸娉ㄥ叆锛屼絾鏄紑濮嬩竴涓釜灏濊瘯.

璇曞埌3鐨勬椂鍊欎笉鍐嶅彉鍖栵紝浜庢槸鏍规嵁鎻愮ず瀹為獙鍚勭abc鐨勭粍鍚堬紝娌℃湁鍙戠幇浠讳綍鍙樺寲锛屼簬鏄户缁鎵炬彁绀猴紝缁х画get锛屽埌id=6鏃跺嚭鐜颁簡flag锛屼竴涓嬪瓙鏅冧笅浜嗘垜鐨勭嫍鐪 鈥233333


Flag get!

WEEK4_0x01_baD

杩欏懆鐨勯鐩讳綋鏉ヨ绠楁槸姣旇緝闅剧殑锛岀涓棰樻墦寮锛屾彁绀哄憡璇夋垜浠瑅im鐨勬彁绀


鐢变簬瀹炲湪娌℃湁鎺ヨЕ杩囧叧浜巚im鐨勪笢瑗匡紝鎵浠ョ櫨搴︿簡寰堜箙閮芥病鎵炬壘鍒颁粈涔堟湁鐢ㄧ殑绾跨储锛屽彧鐭ラ亾vim鏄痩inux鐜涓嬪緢寮哄ぇ鐨勭紪杈戝櫒锛岃闂闀垮悗锛屽闀跨粰鍑虹殑鎻愮ず鏄浠芥枃浠讹紝鐧惧害杩樻槸鏈灉锛屼絾鏄痝oogle鍙互寰楀埌涓涓緢鏈夋晥鐨勬彁绀衡

寰楃煡vim浼氳嚜鍔ㄤ繚瀛榮wp鍚庣紑鐨勫浠芥枃浠讹紝杩欓噷闇瑕佹敞鎰忕殑鏄枃浠剁殑鍚嶇О鏄.xxx.php.swp

鎴愬姛涓嬭浇鍒版簮鏂囦欢锛屾煡鐪嬫簮浠g爜涔嬪悗寰楀埌flag銆

Flag get!

WEEK_0x02_white

杩欓亾棰樼殑鎻愮ず鏄痻ss锛屼絾鏄悗鏉ュ緱鍒颁細闀跨殑鎻愮ず锛屽憡璇夋垜浠繖棰樿繕鏄竴閬撴敞鍏ワ紝鏃犲锛屽彧鑳芥斁寮..

杩欓噷璐翠笂鍒汉鐨剋riteup銆

http://lazysheep.cc/2015/02/15/0x13/

WEEK0x03鎳掑緱璧峰悕瀛椾簡

棰樼洰闈炲父鐨勬湁鎰忔濓紝鏄竴涓櫥褰曢潰鏉匡紝鍥涘鏌ョ湅鍚庯紝鍦ㄥ搷搴斿ご淇℃伅閲屽彂鐜版彁绀.bak

涓嬭浇澶囦唤鏂囦欢鍚庡彲浠ュ緱鍒版簮浠g爜銆

婧愪唬鐮佷腑寰堟竻鏅扮殑鎻愮ず鍒帮紝鐢ㄦ埛鍚嶆槸lightless锛屽瘑鐮佹槸abc!10O0o锛

浣嗗鏋滅敤鎴峰悕鏄痩ightless浼氱垎鍑簓our account is blocked!

瀛樺湪鐭涚浘锛屾棤娉曠櫥闄嗭紝鑰屼笖杈撳叆缁忚繃缂栫爜锛屾棤娉曟敞鍏ワ紝鎵浠ュ姙娉曠粫杩囬獙璇併

褰撴椂鎯冲埌鐨勫姙娉曟槸鐗规畩绗﹀彿锛屼娇寰梥ql鏃犳硶璇嗗埆铔媝hp鍙互璇嗗埆锛屽悗鏉ヨ瘉鏄庢兂娉曟病閿欙紝浣嗘槸鏈夌偣鍎跨畝鍗曘

鐪嬭繃浼氶暱鐨剋riteup涔嬪悗锛屽緱鐭ユ湁涓ょ鍔炴硶锛

  • 绗竴绉嶄负鏀瑰彉澶у皬鍐欙紝鐩稿綋鐨勭畝鍗曪紝涓涓嬪瓙灏卞彲浠ュ緱鍒癴lag銆

  • 绗簩绉嶅拰涔嬪墠鐨勬兂娉曠被浼硷紝浣嗘槸瑕佺敤fuzz灏濊瘯鐗规畩绗﹀彿锛岀鍚堢殑绗﹀彿杩樻槸鐩稿綋澶氱殑銆

鏈鍚庯紝Flag get!

鎬讳綋鏉ヨ锛屾暣涓亣鏈熺殑ctf鐨勪綋楠岃繕鏄涔犲埌浜嗙浉褰撳鐨勪笢瑗匡紝涔熸竻妤氱殑璁よ瘑鍒扮幇鍦ㄥ涔爌hp鐨勮繘搴﹀簲璇ュ姞蹇紝鎵嶆湁鏈轰細寰楀埌鏇村鐨勪笢瑗裤傚姞娌癸紒

CATALOG
  1. 1. WEEK30x01鍋氫笉鍑烘潵涓嶈鐜〤TF绯诲垪涔嬩簩
  2. 2. WEEK3_0x02_SQLI绯诲垪涓
  3. 3. WEEK3_0x03_SQLI绯诲垪浜
  4. 4. WEEK30x04鍋氫笉鍑烘潵涓嶈鐜ヽtf涔嬩笁
  5. 5. WEEK4_0x01_baD
  6. 6. WEEK_0x02_white
  7. 7. WEEK0x03鎳掑緱璧峰悕瀛椾簡