หน้าเว็บ

วันจันทร์ที่ 10 ตุลาคม พ.ศ. 2559

HITCON CTF 2016: %%% (Web) Write-up


Descriptions:
Although it is easy, but I still made this challenge because it is useful in penetration testing.
http://52.196.116.69/
Solution:

1. Access to the web,  Have an error about certificate.

2. View certificate.


3. very-secret-area-for-ctf.orange.tw, Try to modify hosts file.

52.196.116.69 very-secret-area-for-ctf.orange.tw

4. Access to very-secret-area-for-ctf.orange.tw and get a flag.

Flag: hitcon{hihihi, how 4re y0u today?}

55 ความคิดเห็น:

  1. คำตอบ
    1. IEEE Final Year projects Project Center in Chennai are consistently sought after. Final Year Students Projects take a shot at them to improve their aptitudes. Final Year Project Domains for IT

      JavaScript Training in Chennai

      JavaScript Training in Chennai

      The Angular Training covers a wide range of topics including Components, project projects for cse. Angular Training

      ลบ
  2. This is very good blogs. I like this blog for information about lift and generator price in bangladesh .
    I gather very important information form this blog.Thanks again.

    ตอบลบ
  3. G-sol s an English Communication Skills Training Institute catering to people who are keen on getting ahead in their respective careers and want to develop their English and Communication Skills. The training program also enhances their confidence, public speaking, presentations, business English, email drafting and group discussion skills. Moreover, if you are looking for
    IELTS , PTE, CELPIP, Spoken English ,and CD-IELTS coaching, G-SOL takes care of them as well!

    https://www.g-sol.net/ielts-coaching-classes-in-zirakpur-and-panchkula/

    ตอบลบ
  4. Gratis Learning provides you Best Course and discusses the Great method for IELTS , PTE, CELPIP, Spoken English ,and CD-IELTS . Gratis Learning tells you why this method is the best and how to use it to improve your Band Score. Visit Gratis Learning now :- https://gratislearning.in/

    ตอบลบ
  5. You ought to take part in a contest for one of the finest blogs online. I will highly recommend this
    Technology blog!

    ตอบลบ
  6. Awesome article with top quality information and found very interesting looking forward for next blog thank you.
    typeerror nonetype object is not subscriptable

    ตอบลบ
  7. ความคิดเห็นนี้ถูกผู้เขียนลบ

    ตอบลบ
  8. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ... PMP Training in Hyderabad

    ตอบลบ

  9. Amazing article with informative information found valuable and enjoyed reading it thanks for sharing.
    Data Analytics Course Online

    ตอบลบ
  10. This article is good enough for someone to understand this amazing thing, and I'm sure everyone will appreciate these cool things. PMP Certification in Hyderabad

    ตอบลบ
  11. Nice Information Your first-class knowledge of this great job can become a suitable foundation for these people. I did some research on the subject and found that almost everyone will agree with your blog.
    Cyber Security Course in Bangalore

    ตอบลบ
  12. Writing in style and getting good compliments on the article is hard enough, to be honest, but you did it so calmly and with such a great feeling and got the job done. This item is owned with style and I give it a nice compliment. Better!
    Cyber Security Training in Bangalore

    ตอบลบ
  13. It is late to find this act. At least one should be familiar with the fact that such events exist. I agree with your blog and will come back to inspect it further in the future, so keep your performance going.

    Business Analytics Course in Bangalore

    ตอบลบ
  14. A good blog always contains new and exciting information and as I read it I felt that this blog really has all of these qualities that make a blog.

    Data Analytics Course in Bangalore

    ตอบลบ
  15. Thank you so much for this interesting blog. Visit Ogen Infosystem for Website and SEO Services in Delhi, India. For more information visit our website.
    SEO Service in Delhi

    ตอบลบ
  16. I am glad to post a worthy article about the German Language Course and IELTS Coaching from KCR consultants, this may change your career growth and language skill.
    KCR-German Language
    KCR CONSULTANTS

    ตอบลบ
  17. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Course in Bangalore

    ตอบลบ
  18. It is our pleasure to inform you that our team constantly works to polish up their skills and learn all the new technologies launched time and now. It is with the diligence, knowledge and experience of our developers that has made Gratis Soft Solutions a big success among the companies providing best e-commerce website development services in Chandigarh and all over the world.

    web development company in chandigarh

    website development company in chandigarh
    website development in chandigarh

    ตอบลบ
  19. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ตอบลบ
  20. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ตอบลบ
  21. valuable blog,Informative content...thanks for sharing, Waiting for the next update...
    Cyber Security Course in Chennai
    Cyber Security Training in Chennai

    ตอบลบ
  22. Nice blog, very informative content.Thanks for sharing, waiting for the next update…

    MySQL course in Chennai

    ตอบลบ
  23. Wonderful blog found to be very impressive to come across such an awesome blog. I should really appreciate the blogger for the efforts they have put in to develop such amazing content for all the curious readers who are very keen on being updated across every corner. Ultimately, this is an awesome experience for the readers. Anyways, thanks a lot and keep sharing the content in the future too.

    Digital Marketing Training in Bangalore

    ตอบลบ
  24. I bookmarked your website because this site contains valuable information. I am very satisfied with the quality and the presentation of the articles. Thank you so much for saving great things. I am very grateful for this site.

    Data Science Training in Bangalore

    ตอบลบ
  25. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ...

    Digital Marketing Training in Bangalore

    ตอบลบ
  26. I wanted to leave a little comment to support you and wish you the best of luck. We wish you the best of luck in all of your blogging endeavors.

    Artificial Intelligence Training in Bangalore

    ตอบลบ
  27. The Extraordinary blog went amazed with the content that they have developed in a very descriptive manner. This type of content surely ensures the participants explore themselves. Hope you deliver the same near the future as well. Gratitude to the blogger for the efforts.

    Machine Learning Course in Bangalore


    ตอบลบ
  28. Thank you for sharing this wonderful site; it is quite informative. Your writing ability is excellent; you should continue to write blogs of this nature.

    Digital Marketing Training In Telugu
    Digital Marketing Means In Telugu
    digital marketing online course in telugu

    ตอบลบ
  29. Nice article, its very informative content..thanks for sharing...Waiting for the next update.
    React Native Course in Chennai
    React Native Training in Chennai

    ตอบลบ
  30. Valuable blog,Informative content...thanks for sharing, Waiting for the next update…
    Talend Training in Chennai
    Talend Course in Chennai

    ตอบลบ
  31. Thanks For Sharing such a wonderful article the way you presented is really amazing It was extraordinarily simple to discover my way around and amazingly clear, this is staggering!!!
    Best Software Training Institutes

    ตอบลบ