2020-04-04 ycdxsb CTF / pwn / pwnable.kr / Toddler'sBottle2 分钟读完 (大约 362 个字)

pwnable.kr —— coin1

¶question

Mommy, I wanna play a game!
(if your network response time is too slow, try nc 0 9007 inside pwnable.kr server)

Running at : nc pwnable.kr 9007

2020-04-04 ycdxsb CTF / pwn / pwnable.kr / Toddler'sBottle1 分钟读完 (大约 205 个字)

pwnable.kr —— shellshock

¶question

Mommy, there was a shocking news about bash.
I bet you already know, but lets just make it sure :)


ssh shellshock@pwnable.kr -p2222 (pw:guest)

题目要求我们使用ssh登录到服务器上ssh shellshock@pwnable.kr -p2222，密码是guest,有的时候可能有身份的校验，这个时候需要加上参数-o StrictHostKeyChecking=no进行登录

2020-04-04 ycdxsb CTF / pwn / pwnable.kr / Toddler'sBottle1 分钟读完 (大约 222 个字)

pwnable.kr —— mistake

¶question

We all make mistakes, let's move on.
(don't take this too seriously, no fancy hacking skill is required at all)

This task is based on real event
Thanks to dhmonkey

hint : operator priority

ssh mistake@pwnable.kr -p2222 (pw:guest)

题目要求我们使用ssh登录到服务器上ssh mistake@pwnable.kr -p2222，密码是guest,有的时候可能有身份的校验，这个时候需要加上参数-o StrictHostKeyChecking=no进行登录

2020-04-04 ycdxsb CTF / pwn / pwnable.kr / Toddler'sBottle6 分钟读完 (大约 965 个字)

pwnable.kr —— leg

¶question

Daddy told me I should study arm.
But I prefer to study my leg!

Download : http://pwnable.kr/bin/leg.c
Download : http://pwnable.kr/bin/leg.asm

ssh leg@pwnable.kr -p2222 (pw:guest)

题目要求我们使用ssh登录到服务器上ssh leg@pwnable.kr -p2222，密码是guest,有的时候可能有身份的校验，这个时候需要加上参数-o StrictHostKeyChecking=no进行登录

2020-04-04 ycdxsb CTF / pwn / pwnable.kr / Toddler'sBottle7 分钟读完 (大约 986 个字)

pwnable.kr —— input

¶question

1
2
3

Mom? how can I pass my input to a computer program?

ssh input2@pwnable.kr -p2222 (pw:guest)

题目要求我们使用ssh登录到服务器上查看ssh input2@pwnable.kr -p2222，密码是guest,有的时候可能有身份的校验，这个时候需要加上参数-o StrictHostKeyChecking=no进行登录

pwnable.kr —— coin1

¶question

pwnable.kr —— shellshock

¶question

pwnable.kr —— mistake

¶question

pwnable.kr —— leg

¶question

pwnable.kr —— input

¶question

链接

归档

订阅更新

分类

最新文章

标签