hiww_備忘録

Anime, CTF

TAMUctf 18 Writeup

CTF

I participated in TAMUctf 18 (138th out of 1272) as Harekaze.

[Intro 1] Howdy!

Paste the flag from problem.

Flag: gigem{Howdy!}

[Misc 20] breadsticks 2

Download the problem file(breadSticks.bin).

I checked file breadSticks.bin and it seems like Microsoft OOXML.

mv breadSticks.bin breadSticks.docx

Open the breadSticks.docx.

Flag: ICanRead!

[Misc 25] you can run, you can hide

find the hidden flag.

`ssh tamuctf@shell1.ctf.tamu.edu -p 2223`
password: tamuctf
  • Solution

find the flag by ls -aR

tamuctf@6cb21f6960f0:~$ cat .secret/.dont_delete_me.txt
gigem{TAMU_secret_society_qSD358OUYGcezTlFbqeh}

Flag: gigem{TAMU_secret_society_qSD358OUYGcezTlFbqeh}

[Crypto 25] Image`n That

Read the flag from given bmp image using stegno tool.

Flag: GIGEM{THE_WORLD_IS_IN_THE_EYE_OF_THE_BEHOLDER}

[Web 20] Reading

  • Problem
I just love reading!

http://web1.ctf.tamu.edu
  • Solution

There are many words(flags) in this source(index.html).

Find the flag by tools.

(This case, I used grep command.)

Save index.html by curl http://web1.ctf.tamu.edu/

Find the flag by grep (I recommend you to use regular expressions to narrow the string.)

f:id:hiww:20180320164620j:plain

Flag: gigem{F!nD_a_F!AG!}

{Web 40} Bender

  • Solution

Access the problem page.

No Google Bot can help you now!

View the robots.txt.

http://web3.ctf.tamu.edu/robots.txt

User-agent: *
Disallow: oiuwerljk.html

Get the flag from here.

http://web3.ctf.tamu.edu/oiuwerljk.html

Flag: gigem{craw1ing_bot$!}

[Web 50] Bubbles

  • Problem
I don't like taking baths.

http://web4.ctf.tamu.edu
  • Solution

f:id:hiww:20180320171746p:plain

Page title is SQLi and there is a form for submit.

Input ' or 1;# to Password form.

Flag: gigem{ScRuB7h3InpU7}