หน้าเว็บ

วันจันทร์ที่ 10 ตุลาคม พ.ศ. 2559

HITCON CTF 2016: %%% (Web) Write-up


Descriptions:
Although it is easy, but I still made this challenge because it is useful in penetration testing.
http://52.196.116.69/
Solution:

1. Access to the web,  Have an error about certificate.

2. View certificate.


3. very-secret-area-for-ctf.orange.tw, Try to modify hosts file.

52.196.116.69 very-secret-area-for-ctf.orange.tw

4. Access to very-secret-area-for-ctf.orange.tw and get a flag.

Flag: hitcon{hihihi, how 4re y0u today?}

23 ความคิดเห็น:

  1. คำตอบ
    1. IEEE Final Year projects Project Center in Chennai are consistently sought after. Final Year Students Projects take a shot at them to improve their aptitudes. Final Year Project Domains for IT

      JavaScript Training in Chennai

      JavaScript Training in Chennai

      The Angular Training covers a wide range of topics including Components, project projects for cse. Angular Training

      ลบ
  2. This is very good blogs. I like this blog for information about lift and generator price in bangladesh .
    I gather very important information form this blog.Thanks again.

    ตอบกลับลบ
  3. G-sol s an English Communication Skills Training Institute catering to people who are keen on getting ahead in their respective careers and want to develop their English and Communication Skills. The training program also enhances their confidence, public speaking, presentations, business English, email drafting and group discussion skills. Moreover, if you are looking for
    IELTS , PTE, CELPIP, Spoken English ,and CD-IELTS coaching, G-SOL takes care of them as well!

    https://www.g-sol.net/ielts-coaching-classes-in-zirakpur-and-panchkula/

    ตอบกลับลบ
  4. Gratis Learning provides you Best Course and discusses the Great method for IELTS , PTE, CELPIP, Spoken English ,and CD-IELTS . Gratis Learning tells you why this method is the best and how to use it to improve your Band Score. Visit Gratis Learning now :- https://gratislearning.in/

    ตอบกลับลบ
  5. You ought to take part in a contest for one of the finest blogs online. I will highly recommend this
    Technology blog!

    ตอบกลับลบ
  6. Awesome article with top quality information and found very interesting looking forward for next blog thank you.
    typeerror nonetype object is not subscriptable

    ตอบกลับลบ
  7. Awesome article I am impressed by the information that you have on this blog found very useful thank you.
    typeerror nonetype object is not subscriptable

    ตอบกลับลบ
  8. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ... PMP Training in Hyderabad

    ตอบกลับลบ