หน้าเว็บ

วันจันทร์ที่ 10 ตุลาคม พ.ศ. 2559

HITCON CTF 2016: %%% (Web) Write-up


Descriptions:
Although it is easy, but I still made this challenge because it is useful in penetration testing.
http://52.196.116.69/
Solution:

1. Access to the web,  Have an error about certificate.

2. View certificate.


3. very-secret-area-for-ctf.orange.tw, Try to modify hosts file.

52.196.116.69 very-secret-area-for-ctf.orange.tw

4. Access to very-secret-area-for-ctf.orange.tw and get a flag.

Flag: hitcon{hihihi, how 4re y0u today?}

39 ความคิดเห็น:

  1. คำตอบ
    1. IEEE Final Year projects Project Center in Chennai are consistently sought after. Final Year Students Projects take a shot at them to improve their aptitudes. Final Year Project Domains for IT

      JavaScript Training in Chennai

      JavaScript Training in Chennai

      The Angular Training covers a wide range of topics including Components, project projects for cse. Angular Training

      ลบ
  2. This is very good blogs. I like this blog for information about lift and generator price in bangladesh .
    I gather very important information form this blog.Thanks again.

    ตอบกลับลบ
  3. G-sol s an English Communication Skills Training Institute catering to people who are keen on getting ahead in their respective careers and want to develop their English and Communication Skills. The training program also enhances their confidence, public speaking, presentations, business English, email drafting and group discussion skills. Moreover, if you are looking for
    IELTS , PTE, CELPIP, Spoken English ,and CD-IELTS coaching, G-SOL takes care of them as well!

    https://www.g-sol.net/ielts-coaching-classes-in-zirakpur-and-panchkula/

    ตอบกลับลบ
  4. Gratis Learning provides you Best Course and discusses the Great method for IELTS , PTE, CELPIP, Spoken English ,and CD-IELTS . Gratis Learning tells you why this method is the best and how to use it to improve your Band Score. Visit Gratis Learning now :- https://gratislearning.in/

    ตอบกลับลบ
  5. You ought to take part in a contest for one of the finest blogs online. I will highly recommend this
    Technology blog!

    ตอบกลับลบ
  6. Awesome article with top quality information and found very interesting looking forward for next blog thank you.
    typeerror nonetype object is not subscriptable

    ตอบกลับลบ
  7. ผู้เขียนนำความคิดเห็นนี้ออก

    ตอบกลับลบ
  8. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ... PMP Training in Hyderabad

    ตอบกลับลบ

  9. Amazing article with informative information found valuable and enjoyed reading it thanks for sharing.
    Data Analytics Course Online

    ตอบกลับลบ
  10. This article is good enough for someone to understand this amazing thing, and I'm sure everyone will appreciate these cool things. PMP Certification in Hyderabad

    ตอบกลับลบ
  11. Nice Information Your first-class knowledge of this great job can become a suitable foundation for these people. I did some research on the subject and found that almost everyone will agree with your blog.
    Cyber Security Course in Bangalore

    ตอบกลับลบ
  12. Writing in style and getting good compliments on the article is hard enough, to be honest, but you did it so calmly and with such a great feeling and got the job done. This item is owned with style and I give it a nice compliment. Better!
    Cyber Security Training in Bangalore

    ตอบกลับลบ
  13. It is late to find this act. At least one should be familiar with the fact that such events exist. I agree with your blog and will come back to inspect it further in the future, so keep your performance going.

    Business Analytics Course in Bangalore

    ตอบกลับลบ
  14. A good blog always contains new and exciting information and as I read it I felt that this blog really has all of these qualities that make a blog.

    Data Analytics Course in Bangalore

    ตอบกลับลบ
  15. Thank you so much for this interesting blog. Visit Ogen Infosystem for Website and SEO Services in Delhi, India. For more information visit our website.
    SEO Service in Delhi

    ตอบกลับลบ
  16. I am glad to post a worthy article about the German Language Course and IELTS Coaching from KCR consultants, this may change your career growth and language skill.
    KCR-German Language
    KCR CONSULTANTS

    ตอบกลับลบ
  17. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Course in Bangalore

    ตอบกลับลบ
  18. It is our pleasure to inform you that our team constantly works to polish up their skills and learn all the new technologies launched time and now. It is with the diligence, knowledge and experience of our developers that has made Gratis Soft Solutions a big success among the companies providing best e-commerce website development services in Chandigarh and all over the world.

    web development company in chandigarh

    website development company in chandigarh
    website development in chandigarh

    ตอบกลับลบ
  19. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ตอบกลับลบ
  20. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ตอบกลับลบ