generated from saicaca/fuwari
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
31 changed files
with
41 additions
and
42 deletions.
There are no files selected for viewing
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -10,21 +10,21 @@ draft: false | |
|
||
🚩Team: [ICEDTEA](https://ic3dt3a.org/) | ||
🚩CTF challenge link: https://2024.imaginaryctf.org/Challenges.html | ||
![image](https://hackmd.io/_uploads/SJWs3cJKA.png) | ||
![alt text](rk.png) | ||
隊上完整的版本: https://ic3dt3a.org/posts/2024ictf/ | ||
## 🌐WEB | ||
## 🌐 Web | ||
|
||
### readme | ||
> https://cybersharing.net/s/67af3fd941707117 | ||
按下 Load Preview | ||
![image](https://hackmd.io/_uploads/rJaUcxpu0.png) | ||
![alt text](load_preview.png) | ||
|
||
接著打開開發者工具,找到對應的請求 | ||
![image](https://hackmd.io/_uploads/ry1N5ea_0.png) | ||
![alt text](f12.png) | ||
|
||
把要求網址的後面的 ```readme.tar.gz``` 改成 ```flag.txt``` 即可拿到檔案 | ||
![image](https://hackmd.io/_uploads/HywQqg6u0.png) | ||
![image](header.png) | ||
``` | ||
https://cybersharing.net/api/download/file/7a829a2b-4674-471a-9875-02691f5ce6c5/703dc4c6-7b06-4813-874a-857fc1ea4098/7aeb7c98-9bf5-44b3-9eb3-972f225a3576/flag.txt | ||
``` | ||
|
@@ -61,27 +61,27 @@ flag:```ictf{path_normalization_to_the_rescue}``` | |
|
||
|
||
|
||
## 🔍FORENSICS | ||
## 🔍 Forensics | ||
|
||
|
||
### cartesian-1 | ||
上 Instagram 搜尋 Terrence Descartes | ||
> https://www.instagram.com/descartes.terry2001/ | ||
在限時動態中發現 flag | ||
![螢幕擷取畫面 2024-07-20 171424](https://hackmd.io/_uploads/BJCXeZFO0.png) | ||
![螢幕擷取畫面 2024-07-20 171424](ig.png) | ||
|
||
|
||
### cartesian-2 | ||
上 LinkedIn 搜尋 Terrence Descartes,會看到一個跟前面 Instagram 帳號同樣頭像的[帳戶](https://www.linkedin.com/feed/update/urn:li:activity:7220221551969759232/),點下去後查看第一則貼文的第二張照片,裡面有寫 flag(2/1) | ||
![1721434962084](https://hackmd.io/_uploads/ryuHquo_C.jpg) | ||
![1721434962084](map.png) | ||
|
||
利用[ epieos ](https://epieos.com/)搜尋 [email protected](用姓名猜出來的) | ||
|
||
Google Calendar 右邊的[連結](https://calendar.google.com/calendar/u/0/[email protected])點進去 | ||
|
||
題目說要觀察他去年夏天旅行,所以前往 2023 年 6 月,會看到 SUMMER TRIP!!!,點下去就能看到 flag(2/2) 了 | ||
![screencapture-calendar-google-calendar-u-0-embed-2024-07-22-14_32_59](https://hackmd.io/_uploads/rkf8TdjdA.png) | ||
![screencapture-calendar-google-calendar-u-0-embed-2024-07-22-14_32_59](cal.png) | ||
|
||
|
||
### cartesian-3 | ||
|
@@ -102,94 +102,93 @@ A: bonnie | |
4. What city have you primarily lived in for the past three months? | ||
A: San Diego | ||
這篇[ Instagram 貼文](https://www.instagram.com/p/C9lmMxHRRrU/?img_index=1)寫說剛從學校回到家,代表過去 3 個月應該都在學校附近生活,而 Instagram 自我介紹透露出學校是 UCSD,搜尋後發現在 San Diego | ||
![image](https://hackmd.io/_uploads/HyI5VcsOR.png) | ||
![image](ig2.png) | ||
|
||
5. In what city did you grow up? | ||
A: Phoenix | ||
根據他的公開資訊得知: | ||
|
||
Home **↔️** NYC: 2139 英里(資訊來自 Google 日曆) | ||
![image (5)](https://hackmd.io/_uploads/H16JcYodC.png) | ||
![image (5)](cal2.png) | ||
|
||
Home **↔️** 西雅圖: 1114 英里(資訊來自 Github) | ||
![image](https://hackmd.io/_uploads/SJULe00_R.png) | ||
![image](github.png) | ||
|
||
Home **↔️** UCSD: 300 英里(資訊來自 Instagram) | ||
![image](https://hackmd.io/_uploads/B1c37coO0.png) | ||
![image](car.png) | ||
|
||
- 以下三角定位的部分是由隊友[佑丞](https://www.instagram.com/youcheng0406/)完成的: | ||
|
||
找不到適合的工具來三點定位,於是打開 Google 地球,玩了一下量測發現是單位是**公尺**,透過 ChatGPT 先把隊友提供的線索轉換成公尺。 | ||
![meter](https://hackmd.io/_uploads/HkEUoKiOC.png) | ||
![meter](gpt.png) | ||
|
||
首先點紐約市拉一條約 3436000 公尺的線(大概就好不用太準只是用來找方向的) | ||
![image (6)](https://hackmd.io/_uploads/B14TCtjdC.png) | ||
![image (6)](earth.png) | ||
|
||
然後搜尋 UCSD,從 UCSD 拉一條大概接近 1787000 公尺多的線,區域應該是在亞利桑那州,而且鳳凰城很靠近量測點,所以猜測是鳳凰城。 | ||
![USD](https://hackmd.io/_uploads/ryMRAKi_0.png) | ||
![USD](earth2.png) | ||
|
||
最後從西雅圖那個點拉一條 482000m 的線,確實在亞利桑那州範圍內,接著找出距離最接近 1,787,065m 位置的城市,看了一下鳳凰城,把量測點拉過去驗證,符合猜測。 | ||
![USD1](https://hackmd.io/_uploads/rJAA0Ko_0.png) | ||
![USD1](earth3.png) | ||
|
||
6. What is the name of your favorite poet? | ||
1. What is the name of your favorite poet? | ||
A: Robert Frost | ||
從他 Instagram 帳戶追蹤的對象看出來的,每個都跟 Robert Frost 有關 | ||
![image](https://hackmd.io/_uploads/SJo9-5juA.png) | ||
![image](ig3.png) | ||
|
||
7. What was the make and model of your first car? | ||
1. What was the make and model of your first car? | ||
A: Honda Civic | ||
這篇[ Instagram 貼文](https://www.instagram.com/p/C9lmMxHRRrU/?img_index=1)最後有寫 **#firstcar**,對圖片使用 Google 智慧鏡頭即可搜尋出車款 | ||
![image](https://hackmd.io/_uploads/rkwMx9jd0.png) | ||
![image](car2.png) | ||
|
||
8. In what year was your father born? | ||
1. In what year was your father born? | ||
A: 1981 | ||
上 Github 搜尋 terrence descartes 只能找找到一個[帳戶](https://github.com/descartes1337),查看他唯一的專案的 commits 裡的[ redact sensitive info ](https://github.com/descartes1337/birthday-card/commit/e6f565a35fd10136647336780731a4d19aabfac7)會發現他爸 43 歲,2024-43=1981 | ||
![image](https://hackmd.io/_uploads/H118gciOA.png) | ||
![image](diff.png) | ||
|
||
9. What is your mother's maiden name? | ||
1. What is your mother's maiden name? | ||
A: Jackson | ||
![image](https://hackmd.io/_uploads/ryJhgcodA.png) | ||
![image](link.png) | ||
從此篇[ LinkedIn 貼文](https://www.linkedin.com/feed/update/urn:li:activity:7219899411361882112/)中得知她媽媽姓名為 Amelia Jackson Descartes,根據美國冠夫姓的方式,會把夫姓放後面,引此婚前姓氏為 Jackson | ||
|
||
10. At what company do you work at? | ||
1. At what company do you work at? | ||
A: Cohort Calculations | ||
他的 LinkedIn 寫的: | ||
![螢幕擷取畫面 2024-07-22 153643](https://hackmd.io/_uploads/SyQQ3KjuA.png) | ||
![螢幕擷取畫面 2024-07-22 153643](link2.png) | ||
|
||
11. In what city did you go on vacation last summer? | ||
1. In what city did you go on vacation last summer? | ||
A: Saint Paul | ||
![image](https://hackmd.io/_uploads/SkU03YoO0.png) | ||
![image](map.png) | ||
搜尋[此貼文](https://www.linkedin.com/feed/update/urn:li:activity:7220221551969759232/)第二張圖片左上角的地點的所在地即可得知答案 | ||
|
||
12. What are you supposed to do on August 21? | ||
1. What are you supposed to do on August 21? | ||
A: Drop off top secret information | ||
在他的 Google 日曆中察看 8/21 的行程即可得知答案 | ||
![image](https://hackmd.io/_uploads/H1CQ0tjOR.png) | ||
|
||
13. Who was your boss in your first job? | ||
![alt text](cal3.png) | ||
1. Who was your boss in your first job? | ||
A: Farmer Johnson | ||
在他的 LinkedIn 中寫的第一份工作的公司名稱的一部分即是答案 | ||
![image](https://hackmd.io/_uploads/Byp30Ksd0.png) | ||
![image](link3.png) | ||
|
||
最後填完所有資料按下 **submit** 就會跳到 flag 頁面 | ||
![flag](https://hackmd.io/_uploads/HkpDlciOR.png) | ||
![flag](flag.png) | ||
|
||
|
||
### dog-mom | ||
> https://cybersharing.net/s/4f1dbcbb01b5f98d | ||
![image (3)](https://hackmd.io/_uploads/HyeAR9i_C.jpg) | ||
![image (3)](dog_mom.png) | ||
|
||
搜尋圖片其中一個地方後 Google 辨識出地點了 | ||
![螢幕擷取畫面 2024-07-22 162256 (1)](https://hackmd.io/_uploads/SJL6PqoOR.png) | ||
![螢幕擷取畫面 2024-07-22 162256 (1)](dog_mom2.png) | ||
|
||
接著在 Google 地球上搜尋此地點後稍微逛一下附近即可找到題目圖片左下方的地點 | ||
![螢幕擷取畫面 2024-07-22 163540](https://hackmd.io/_uploads/HJVw5cj_R.png) | ||
![螢幕擷取畫面 2024-07-22 163540](dog_mom3.png) | ||
|
||
根據拍攝角度來看應該是在有一定高度的地方拍的,大概率是在學習大教堂上 | ||
![dog mon 2](https://hackmd.io/_uploads/SJaeRcoO0.jpg) | ||
![dog mon 2](dog_mom4.png) | ||
|
||
盡可能還原拍攝角度了 XD | ||
![dog mon](https://hackmd.io/_uploads/SJfOaqouC.jpg) | ||
![dog mon](dog_mom5.png) | ||
|
||
|
||
### playful-puppy | ||
|
@@ -201,7 +200,7 @@ summon minecraft:wolf ~ ~ ~ {CustomName:dog name,Owner:cleverbear57,CustomNameVi | |
``` | ||
|
||
接著把 ```playful-puppy\world``` 丟到你的minecraft資料夾的 ```saves``` 底下,在遊戲中打開它,會發現一堆狗 | ||
![2024-07-25_16.23.27](https://hackmd.io/_uploads/SkLVZc1FR.jpg) | ||
![2024-07-25_16.23.27](minecraft.png) | ||
|
||
所以猜測 ```dog.mcfunction``` 生成的都不是他的狗,把裡面的 ```summon``` 指令改成 ```kill``` 指令把多餘的狗殺掉後就會剩下他的狗了(這部分其實是由隊友 [ChiLin.H](https://neko70.net/) 猜到的)。 | ||
|
||
|
@@ -211,7 +210,7 @@ kill @e[type=minecraft:wolf,name="dog name"] | |
``` | ||
|
||
接著進到遊戲中按下 <kbd>T</kbd>,執行 ```/reload```,再執行 ```/function test:dog```,即可消滅多餘的狗,就可以找到他的狗了,接著把名稱填入 ictf{``` ```}內即可 | ||
![2024-07-21_14.14.03](https://hackmd.io/_uploads/SkVHn2yt0.jpg) | ||
![2024-07-21_14.14.03](minecraft2.png) | ||
|
||
事後看[ 官方 writeup ](https://github.com/ImaginaryCTF/ImaginaryCTF-2024-Challenges-Public/tree/main/Forensics/playful-puppy)發現根本不是這樣解,是出題者忘了把 ```dog.mcfunction``` 刪掉了 | ||
|
||
|
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Oops, something went wrong.
Oops, something went wrong.
Oops, something went wrong.
Oops, something went wrong.
Oops, something went wrong.