点击此处获得更好的阅读体验
WriteUp来源
https://dunsp4rce.github.io/csictf-2020/linux/2020/07/22/find32.html
by AnandSaminathan
题目描述
I should have really named my files better. I thought I've hidden the flag, now I can't find it myself. (Wrap your flag in csictf{})
题目考点
解题思路
On connecting to the server, we found a lot of random files. The question has the number 32, which is the ASCII of space and spaces in flags are underscores. So we searched for underscores and found a file that had this:
1 | csictf{not_the_flag}{user2:AAE976A5232713355D58584CFE5A5} |
So those were the credentials of user2
. Logging into user2, we again found a bunch of random files, again searching for underscore, gave the string th15_15_unu5u41
which had to be the flag.
Flag
1 | csictf{th15_15_unu5u41} |