หน้าเว็บ

วันจันทร์ที่ 10 ตุลาคม พ.ศ. 2559

HITCON CTF 2016: %%% (Web) Write-up


Descriptions:
Although it is easy, but I still made this challenge because it is useful in penetration testing.
http://52.196.116.69/
Solution:

1. Access to the web,  Have an error about certificate.

2. View certificate.


3. very-secret-area-for-ctf.orange.tw, Try to modify hosts file.

52.196.116.69 very-secret-area-for-ctf.orange.tw

4. Access to very-secret-area-for-ctf.orange.tw and get a flag.

Flag: hitcon{hihihi, how 4re y0u today?}

27 ความคิดเห็น:

  1. This is very good blogs. I like this blog for information about lift and generator price in bangladesh .
    I gather very important information form this blog.Thanks again.

    ตอบลบ
  2. G-sol s an English Communication Skills Training Institute catering to people who are keen on getting ahead in their respective careers and want to develop their English and Communication Skills. The training program also enhances their confidence, public speaking, presentations, business English, email drafting and group discussion skills. Moreover, if you are looking for
    IELTS , PTE, CELPIP, Spoken English ,and CD-IELTS coaching, G-SOL takes care of them as well!

    https://www.g-sol.net/ielts-coaching-classes-in-zirakpur-and-panchkula/

    ตอบลบ
  3. Awesome article with top quality information and found very interesting looking forward for next blog thank you.
    typeerror nonetype object is not subscriptable

    ตอบลบ
  4. ความคิดเห็นนี้ถูกผู้เขียนลบ

    ตอบลบ
  5. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ... PMP Training in Hyderabad

    ตอบลบ
  6. This article is good enough for someone to understand this amazing thing, and I'm sure everyone will appreciate these cool things. PMP Certification in Hyderabad

    ตอบลบ
  7. Thank you so much for this interesting blog. Visit Ogen Infosystem for Website and SEO Services in Delhi, India. For more information visit our website.
    SEO Service in Delhi

    ตอบลบ
  8. I am glad to post a worthy article about the German Language Course and IELTS Coaching from KCR consultants, this may change your career growth and language skill.
    KCR-German Language
    KCR CONSULTANTS

    ตอบลบ
  9. It is our pleasure to inform you that our team constantly works to polish up their skills and learn all the new technologies launched time and now. It is with the diligence, knowledge and experience of our developers that has made Gratis Soft Solutions a big success among the companies providing best e-commerce website development services in Chandigarh and all over the world.

    web development company in chandigarh

    website development company in chandigarh
    website development in chandigarh

    ตอบลบ
  10. Nice blog, very informative content.Thanks for sharing, waiting for the next update…

    MySQL course in Chennai

    ตอบลบ
  11. The Extraordinary blog went amazed with the content that they have developed in a very descriptive manner. This type of content surely ensures the participants explore themselves. Hope you deliver the same near the future as well. Gratitude to the blogger for the efforts.

    Machine Learning Course in Bangalore


    ตอบลบ
  12. Thank you so much for doing the impressive job here, everyone will surely like your post.
    data science course in malaysia

    ตอบลบ
  13. There is no greater wealth in this world than peace of mind, Blessed Thursday. Download. happy thursday everyone Wishing you a beautiful Thursday, Good Thursday Quotes For The Day

    ตอบลบ