หน้าเว็บ

วันจันทร์ที่ 10 ตุลาคม พ.ศ. 2559

HITCON CTF 2016: %%% (Web) Write-up


Descriptions:
Although it is easy, but I still made this challenge because it is useful in penetration testing.
http://52.196.116.69/
Solution:

1. Access to the web,  Have an error about certificate.

2. View certificate.


3. very-secret-area-for-ctf.orange.tw, Try to modify hosts file.

52.196.116.69 very-secret-area-for-ctf.orange.tw

4. Access to very-secret-area-for-ctf.orange.tw and get a flag.

Flag: hitcon{hihihi, how 4re y0u today?}

65 ความคิดเห็น:

  1. คำตอบ
    1. IEEE Final Year projects Project Center in Chennai are consistently sought after. Final Year Students Projects take a shot at them to improve their aptitudes. Final Year Project Domains for IT

      JavaScript Training in Chennai

      JavaScript Training in Chennai

      The Angular Training covers a wide range of topics including Components, project projects for cse. Angular Training

      ลบ
  2. This is very good blogs. I like this blog for information about lift and generator price in bangladesh .
    I gather very important information form this blog.Thanks again.

    ตอบลบ
  3. G-sol s an English Communication Skills Training Institute catering to people who are keen on getting ahead in their respective careers and want to develop their English and Communication Skills. The training program also enhances their confidence, public speaking, presentations, business English, email drafting and group discussion skills. Moreover, if you are looking for
    IELTS , PTE, CELPIP, Spoken English ,and CD-IELTS coaching, G-SOL takes care of them as well!

    https://www.g-sol.net/ielts-coaching-classes-in-zirakpur-and-panchkula/

    ตอบลบ
  4. Awesome article with top quality information and found very interesting looking forward for next blog thank you.
    typeerror nonetype object is not subscriptable

    ตอบลบ
  5. ความคิดเห็นนี้ถูกผู้เขียนลบ

    ตอบลบ
  6. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ... PMP Training in Hyderabad

    ตอบลบ

  7. Amazing article with informative information found valuable and enjoyed reading it thanks for sharing.
    Data Analytics Course Online

    ตอบลบ
  8. This article is good enough for someone to understand this amazing thing, and I'm sure everyone will appreciate these cool things. PMP Certification in Hyderabad

    ตอบลบ
  9. Nice Information Your first-class knowledge of this great job can become a suitable foundation for these people. I did some research on the subject and found that almost everyone will agree with your blog.
    Cyber Security Course in Bangalore

    ตอบลบ
  10. Writing in style and getting good compliments on the article is hard enough, to be honest, but you did it so calmly and with such a great feeling and got the job done. This item is owned with style and I give it a nice compliment. Better!
    Cyber Security Training in Bangalore

    ตอบลบ
  11. It is late to find this act. At least one should be familiar with the fact that such events exist. I agree with your blog and will come back to inspect it further in the future, so keep your performance going.

    Business Analytics Course in Bangalore

    ตอบลบ
  12. Thank you so much for this interesting blog. Visit Ogen Infosystem for Website and SEO Services in Delhi, India. For more information visit our website.
    SEO Service in Delhi

    ตอบลบ
  13. I am glad to post a worthy article about the German Language Course and IELTS Coaching from KCR consultants, this may change your career growth and language skill.
    KCR-German Language
    KCR CONSULTANTS

    ตอบลบ
  14. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Course in Bangalore

    ตอบลบ
  15. It is our pleasure to inform you that our team constantly works to polish up their skills and learn all the new technologies launched time and now. It is with the diligence, knowledge and experience of our developers that has made Gratis Soft Solutions a big success among the companies providing best e-commerce website development services in Chandigarh and all over the world.

    web development company in chandigarh

    website development company in chandigarh
    website development in chandigarh

    ตอบลบ
  16. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ตอบลบ
  17. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ตอบลบ
  18. Nice blog, very informative content.Thanks for sharing, waiting for the next update…

    MySQL course in Chennai

    ตอบลบ
  19. Wonderful blog found to be very impressive to come across such an awesome blog. I should really appreciate the blogger for the efforts they have put in to develop such amazing content for all the curious readers who are very keen on being updated across every corner. Ultimately, this is an awesome experience for the readers. Anyways, thanks a lot and keep sharing the content in the future too.

    Digital Marketing Training in Bangalore

    ตอบลบ
  20. I bookmarked your website because this site contains valuable information. I am very satisfied with the quality and the presentation of the articles. Thank you so much for saving great things. I am very grateful for this site.

    Data Science Training in Bangalore

    ตอบลบ
  21. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ...

    Digital Marketing Training in Bangalore

    ตอบลบ
  22. I wanted to leave a little comment to support you and wish you the best of luck. We wish you the best of luck in all of your blogging endeavors.

    Artificial Intelligence Training in Bangalore

    ตอบลบ
  23. The Extraordinary blog went amazed with the content that they have developed in a very descriptive manner. This type of content surely ensures the participants explore themselves. Hope you deliver the same near the future as well. Gratitude to the blogger for the efforts.

    Machine Learning Course in Bangalore


    ตอบลบ
  24. Nice article, its very informative content..thanks for sharing...Waiting for the next update.
    React Native Course in Chennai
    React Native Training in Chennai

    ตอบลบ
  25. Valuable blog,Informative content...thanks for sharing, Waiting for the next update…
    Talend Training in Chennai
    Talend Course in Chennai

    ตอบลบ
  26. Thanks For Sharing such a wonderful article the way you presented is really amazing It was extraordinarily simple to discover my way around and amazingly clear, this is staggering!!!
    Best Software Training Institutes

    ตอบลบ
  27. You have completed certain reliable points there. I did some research on the subject and found that almost everyone will agree with your blog.

    Artificial Intelligence Training in Bangalore

    ตอบลบ
  28. Thank you so much for doing the impressive job here, everyone will surely like your post.
    data science course in malaysia

    ตอบลบ
  29. I have read your article, it is very informative and useful to me, I admire the valuable information you offer in your articles. Thanks for posting it ...

    Cloud Computing Institutes in Bangalore

    ตอบลบ
  30. Happy to chat on your blog, I feel like I can't wait to read more reliable posts and think we all want to thank many blog posts to share with us.

    Data Science Training Institutes in Bangalore

    ตอบลบ
  31. I read your excellent post. It's a great job. I enjoyed reading your post for the first time. I want to thank you for this publication. Thank you...

    Data Analytics Course in Patna

    ตอบลบ
  32. Wonderful illustrated information. Thank you. It will certainly be very useful for my future projects. I would love to see more articles on the same topic!

    Data Science Training in Bangalore

    ตอบลบ
  33. Good blog and absolutely exceptional. You can do a lot better, but I still say it's perfect. Keep doing your best.

    Data Science Training in Durgapur

    ตอบลบ
  34. I really appreciate this wonderful message you have given us. I assure you that would be beneficial for most people.

    Data Analytics Course in Nagpur

    ตอบลบ
  35. This is really a nice and informative, containing all information and also has a great impact on the new technology. Thanks for sharing it,
    full stack web development course malaysia

    ตอบลบ
  36. There is no greater wealth in this world than peace of mind, Blessed Thursday. Download. happy thursday everyone Wishing you a beautiful Thursday, Good Thursday Quotes For The Day

    ตอบลบ