POJIA破甲
地图 / H1 Hackyholidays CTF - The Grinch was defeated

H1 Hackyholidays CTF - The Grinch was defeated

其他弱点 / Unlabeled / #1069467

厂商
h1-ctf
严重程度
高危
赏金
—
弱点
Unlabeled
研究员
@val_brux
披露日期
2021-01-11
资产
*.hackyholidays.h1ctf.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(36582 字符中的一小部分)
The following writeup will underline all the steps and tools used to solve the 12 challenges of the H1 Holidays CTF. The theme of the competition was the Grinch. How it is possible to read from the competition blog post https://www.hackerone.com/blog/12-days-hacky-holidays-ctf , the goal was to …
原文中的代码
#!/usr/bin/python3
import requests
import re

if __name__ == "__main__":
    print("[*] Challenge 1")
    url = "https://hackyholidays.h1ctf.com:443/robots.txt"
    r = requests.get(url)
    r1 = re.findall(r"flag\{[\w-]+\}",r.text)
    print("[*] Flag in robots.txt: {}".format(r1[0]))

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 h1-ctf 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @val_brux · 版权归作者与 h1-ctf 所有

同类报告

June 2022 Incident ReportHackerOne · 2022-07-01HTML-injection in PDF-export leads to LFIVisma Public · — · $500DOM XSS on duckduckgo.com searchDuckDuckGo · 2020-06-14An attacker can archive and unarchive any structured scope object on HackerOneHackerOne · 2022-04-18Java (Maven): Actually fix the use of insecure protocol to download/upload artifactsGitHub Security Lab · — · $4,000Handling of `tracking` command allows making arbitrary blind requests with user's cookies from Grammarly Extension's originSuperhuman (formerly Grammarly) · 2019-08-01