daffainfo
/
ctf-writeup
mirror of https://github.com/daffainfo/ctf-writeup.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

feat: added future for ekoparty

pull/15/head
daffainfo 2023-11-04 07:27:51 +07:00
parent 513f2cacc8
commit 1ac81f1a0c
3 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
EKOPARTY CTF 2023/Future/README.md Normal file
View File

@ -0,0 +1,14 @@
# Future
> You are not allowed to escalate this problem! the root cause as usual is some kind of validation failure, may we have this issue in the near future?
## About the Challenge
We need to pentest the gopher protocol to obtain the flag
## How to Solve?
The gopher protocol is vulnerable to `Directory Traversal` attack, where we can read the flag by accessing `../../../root/.flag.txt`
![flag](images/flag.png)
```
EKO{r00t_was_pwn3d!}
```

BIN
EKOPARTY CTF 2023/Future/images/flag.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 142 KiB

1
EKOPARTY CTF 2023/README.md
View File

@ -11,4 +11,5 @@ CTF writeup for The EKOPARTY CTF 2023 2023. I took part in this CTF competition
| Ekonet | [Rulez](/EKOPARTY%20CTF%202023/Rulez/)
| Ekonet | [Quotes](/EKOPARTY%20CTF%202023/Quotes/)
| Ekonet | [Sync](/EKOPARTY%20CTF%202023/Sync/)
| Ekonet | [Future](/EKOPARTY%20CTF%202023/Future/)
| Ekonet | [Who](/EKOPARTY%20CTF%202023/Who/)