World MISC master advanced offensive and defensive zone MISCall

    Hello everyone, this time I bring writeup offensive and misc part MISCall world for everyone.
    Before I begin to talk about a few problem-solving, solving this question thanks to some of the Linux command, it is recommended to look at before writeup first look.
    Well, Closer to home, to download the attachment, an unknown file is found, then binwalk it.

Here Insert Picture Description

    Found a bzip2 compressed format, then use the command unzip it.

Here Insert Picture Description

    There is a ctf found a folder, see a flag after entering. Open look, however, there are no flag.

Here Insert Picture Description

    Then we note that there is a .git folder, so we take into account the Git may be leaked, so we use git stash show to look at the file was made what changes.

Here Insert Picture Description

    I found a flag text and a python script, and then extracted.

Here Insert Picture Description

    But here to remind us that after the first flag existing text deleted in order to extract the files. So we first flag and then extract text deleted.

Here Insert Picture Description

    Direct view flag text and found a bunch of English, certainly not the flag, then we think there is a python script, and then run it.

Here Insert Picture Description

    A syntax error, missing parentheses after print, then enter vim (file name followed by a space) into the text editor, hold down i to enter edit mode, after editing press Esc to exit edit mode, then hold down the Shift plus: can inquire into the state, enter wq! to save your changes and exit, run the script again to correct the error.

Here Insert Picture Description

    Get flag: NCN48d76c96f6f9cebc0e8fc014078b9fd4ce483fb6.

Published 21 original articles · won praise 21 · views 5665

Guess you like

Origin blog.csdn.net/MarcusRYZ/article/details/104315686