'CTF(Capture The Flag)' 카테고리의 글 목록

safe_vector

풀이 $ pwn checksec chall [*] '/home/user/바탕화면/zer0ptf/safe_vector/chall' Arch: amd64-64-little RELRO: Full RELRO Stack: No canary found NX: NX enabled PIE: PIE enabled #include #include template class safe_vector: public std::vector { public: void wipe() { std::vector::resize(0); std::vector::shrink_to_fit(); } T& operator[](int index) { int size = std::vector::size(); if (size == 0) { throw "ind..

CTF(Capture The Flag)/zeroptf 2021 2021.04.07

babycrypto3

풀이 -----BEGIN PUBLIC KEY----- ME0wDQYJKoZIhvcNAQEBBQADPAAwOQIyAyixQTmi5UuIpGYvGmfMOs0ZKcm2J5S7 ZJFq/wKZH4BFbk0O7U1ZHfdwjVry6bT7VokCAwEAAQ== -----END PUBLIC KEY----- b'\x01\x14\x1fUxa\xaa\xb3C\x9b\xe1\xeb\x87\xa0\x12`\x156e\x8a\x05\xf4\xf3x\xf7\xb9\xda\xe5J\x08Cn\\C]V\xdd\x1bH\x96\xb74\xae\xcd\x83\x88A\xd5\x92&' 공개키 파일과 암호화된 데이터 파일을 하나씩 준다. rsactftool을 이용해 풀어보면, 평문값을 구할 수 있다. STR : b'\x00\x02`g\x..

CTF(Capture The Flag)/Line 2021 2021.03.22

babycrypto2

풀이 #!/usr/bin/env python from base64 import b64decode from base64 import b64encode import socket import multiprocessing from Crypto.Cipher import AES from Crypto.Random import get_random_bytes from Crypto.Util.Padding import pad, unpad import hashlib import sys class AESCipher: def __init__(self, key): self.key = key def encrypt(self, data): iv = get_random_bytes(AES.block_size) self.cipher = AE..

CTF(Capture The Flag)/Line 2021 2021.03.22

babycrypto1

풀이 #!/usr/bin/env python from base64 import b64decode from base64 import b64encode import socket import multiprocessing from Crypto.Cipher import AES from Crypto.Random import get_random_bytes from Crypto.Util.Padding import pad, unpad import hashlib import sys class AESCipher: def __init__(self, key): self.key = key def encrypt(self, data): iv = get_random_bytes(AES.block_size) self.cipher = AE..

CTF(Capture The Flag)/Line 2021 2021.03.22

baby sqli

풀이 Welcome, {{name}}! {% if name == 'admin' %} zer0pts{*****CENSORED*****} {% else %} No flag for you :( {% endif %} 해당 페이지에 admin 으로 로그인을 하면 flag를 알려준다. @app.route('/login', methods=['post']) def auth(): username = flask.request.form.get('username', default='', type=str) password = flask.request.form.get('password', default='', type=str) if len(username) > 32 or len(password) > 32: flask.sessio..