Today did two world title offensive and defensive WEB master advanced, although the steps so short, but because of their own vegetables, so access to information, to find a breakthrough point to spend a lot of time.
A, ics-06
Open questions, point to point and found that in addition to Report Center, click anywhere else will only return to a page, which is consistent with Title Description:
Report Center is such an interface, and can not enter data, view the source code is also no idea of the card relatively long time, until you find obviously did not operate behind a url with a:? id = 1, this bit mean, you can get mass participation, as the parameters do not know why this should be to the world of offensive and defensive tips.
Although it is a bit unclear, but it should be a value equal to id will return something about the first explosion with a burp of blasting modules:
Really is, 2333, return url input, directly shows the flag, this is over? End very suddenly.
Two, Lottery
The second question is no description of the subject, is a simulated lottery system :
I thought I could start a direct registration without password when registering a breakthrough point, try a different admin Han did not, can not find the page source code generation logic lottery, but to the last page Tip: To earn 99.9 million to buy flag .
But still no idea, but unfortunately looked writeup, and I saw there was a hint in the robots.txt years, disallow the git, git indicating the presence leak (about that small companies in order to facilitate the project site did not spread to archive deleted).
For the git source code disclosure, there is a big brother on github githack can directly enter the url to download and extract have completion.
After downloading the archive, read the source code
Read through it all, found to be temporarily generated when you click buy and use a random number function input contrast, the success rate is very low, you can use part here:
Here that a comparison, and the two other == even weak comparison, the package can be directly changed burp, configuration [true, true, true, true, true, true, true] to make the identity:
Once to 50 million, you can buy flag after two friends in the Claim Your Prize:
