find32

点击此处获得更好的阅读体验


WriteUp来源

https://dunsp4rce.github.io/csictf-2020/linux/2020/07/22/find32.html

by AnandSaminathan

题目描述

I should have really named my files better. I thought I've hidden the flag, now I can't find it myself. (Wrap your flag in csictf{})

题目考点

解题思路

On connecting to the server, we found a lot of random files. The question has the number 32, which is the ASCII of space and spaces in flags are underscores. So we searched for underscores and found a file that had this:

1
csictf{not_the_flag}{user2:AAE976A5232713355D58584CFE5A5}

So those were the credentials of user2. Logging into user2, we again found a bunch of random files, again searching for underscore, gave the string th15_15_unu5u41 which had to be the flag.

Flag

1
csictf{th15_15_unu5u41}