LoRexxar's Blog

hctf_game_week2_writeup

2016/02/18

鍋囨湡闅惧緱鏈夋椂闂寸┖闂蹭笅鏉ワ紝灏卞拰鍗忎細鐨勫皬浼欎即缁勭粐浜嗕竴娆℃瘮杈冪畝鍗曠殑ctf姣旇禌閽堝瀛︽牎鐨勫寮熷濡逛滑锛岃繖閲屽氨璐翠笂姣忎竴娆$殑writeup锛屼互渚涙暣鐞嗗涔犵敤銆

WEB

WEB浠0寮濮嬩箣xss challenge0.5 POINT: 20 DONE

棰樼洰ID锛 56
棰樼洰鎻忚堪锛 http://115.28.78.16/xss/xss0.5/index.php
1銆佹垚鍔熸墽琛宲rompt(1).
2銆乸ayload涓嶉渶瑕佺敤鎴蜂氦浜
3銆乸ayload蹇呴』瀵逛笅杩版祻瑙堝櫒鏈夋晥锛 Chrome(鏈鏂扮増) - Firefox(鏈鏂扮増)
4銆佸皢鏈夋晥payload鍙戦佺粰LoRexxar鎴栬呭ぇ椋炲鑾峰彇flag
Hint: 鏆傛棤HINT

灏辨槸涓畝鍗曠殑xss鍏ラ棬棰樼洰锛屼粎浠呰繃婊や簡script锛岃屼笖鍙槸涓娆¤繃婊わ紝鏈変竴涓囩鏂规硶璁╀粬寮圭獥銆

<scrscriptipt>prompt(1)</scrscriptipt>
<svg/onload=prompt(1)
<img src onerror=prompt(1)

杩欎簺閮藉彲浠

WEB浠0寮濮嬩箣xss challenge1 POINT: 100 DONE

棰樼洰ID锛 57
棰樼洰鎻忚堪锛 http://115.28.78.16/xss/xss1/index.php
1銆佹垚鍔熸墽琛宲rompt(1).
2銆乸ayload涓嶉渶瑕佺敤鎴蜂氦浜
3銆乸ayload蹇呴』瀵逛笅杩版祻瑙堝櫒鏈夋晥锛 Chrome(鏈鏂扮増) - Firefox(鏈鏂扮増)
4銆佸皢鏈夋晥payload鍙戦佺粰LoRexxar鎴栬呭ぇ椋炲鑾峰彇flag
Hint: 鏆傛棤HINT

棰樼洰寰堢畝鍗曪紝浣嗘槸鎴戜及璁80%鐨勪汉閮戒笉鐭ラ亾鏄粈涔堝師鐞嗭紝鍏堢粰鍑轰袱绉峱ayload
<svg><script>prompt&#40;1)</script>
<script>prompt鍙嶅紩鍙1鍙嶅紩鍙</script>(濡圭殑鎴戝彂鐜癿d璇硶杩欎釜鍙嶅紩鍙锋湁鐢ㄦ墦涓嶅嚭鏉)

杩欓噷鐨剆vg涓嶈兘鍘绘帀锛岀敱浜巟ml缂栫爜鐗规с傚湪SVG鍚戦噺閲岄潰鐨剆cript鍏冪礌锛堟垨鑰呭叾浠朇DATA鍏冪礌 锛夛紝浼氬厛杩涜xml瑙f瀽銆傚洜姝&#x28锛堝崄鍏繘鍒讹級鎴栬&#40锛堝崄杩涘埗锛夋垨鑰&lpar锛涳紙html瀹炰綋缂栫爜锛変細琚繕鍘熸垚锛堛

misc

MISC 椹鹃┒鎶鏈鐩笁 POINT: 200 DONE

棰樼洰ID锛 38
棰樼洰鎻忚堪锛 绉戠洰涓夊紑濮嬭矾鑰冧簡鍟婏紝灏忎紮瀛愪滑蹇笂杞︼紒 杞︾エ鍦0x02.jpg
Hint: 鏃

绉戠洰涓夌殑鍏ュ彛姣旇緝鍧戠埞锛屽紑濮嬩竴鐩存病鎵惧埌锛屽悗鏉ュ彂鐜版槸涓涓茬绉樹唬鐮/s/xxx鐨勭綉鐩樺湴鍧銆傘傚湪0x02涓氨鍙互鎵惧埌銆

绉戠洰涓夌殑闅惧害鏈夌偣鍎胯櫄楂橈紝鎴戜娇鐢ㄧ殑diff -a鍛戒护锛屼竴涓嬪氨鑳界湅鍒颁竴涓猙ase64缂栫爜杩囩殑宸紓锛岃В鐮佸啀椤虹潃鎵惧氨鍙互get浜嗐

MISC 椹鹃┒鎶鏈鐩洓 POINT: 250 DONE

棰樼洰ID锛 39
棰樼洰鎻忚堪锛 寮浜旀。涓婇珮閫燂紝鏁欑粌甯︿綘绉嬪悕灞便

绉戠洰鍥涚殑闅惧害灏辨瘮杈冮珮浜嗭紝杩欓噷鏄痻dctf鐨刴isc2锛屽帇缂╁寘鏄庢枃鏀诲嚮銆
杩欓噷鎵惧埌涓涓獁in鐜涓嬮潪甯稿ソ鐢ㄧ殑杞欢Advanced Archive Password Recovery
澶ф20鍒嗛挓灏辫兘璺戝嚭鏉ヤ簡銆

pentest

lightless&aklis鐨勬笚閫忔暀瀹-3 POINT: 50 DONE

棰樼洰ID锛 61
棰樼洰鎻忚堪锛 http://120.27.53.238/pentest/03/http-cookie.php

娉ㄦ剰鐪嬫枃妗o紒锛佽繕鏈夎繖绉嶉鐩竴鑸鎶撳寘缈荤炕鐪嬶紝灏辫兘寰楀埌鎻愮ず浜嗐傘傘

CATALOG
  1. 1. WEB
    1. 1.1. WEB浠0寮濮嬩箣xss challenge0.5 POINT: 20 DONE
    2. 1.2. WEB浠0寮濮嬩箣xss challenge1 POINT: 100 DONE
  2. 2. misc
    1. 2.1. MISC 椹鹃┒鎶鏈鐩笁 POINT: 200 DONE
    2. 2.2. MISC 椹鹃┒鎶鏈鐩洓 POINT: 250 DONE
  3. 3. pentest
    1. 3.1. lightless&aklis鐨勬笚閫忔暀瀹-3 POINT: 50 DONE