[JP-RISSA]第７回定例イベント_Q16_Q18_Q28

Transcript

1. © 2020 Kawarabayashi Hiroshi 2020.9.12ɹՏݪྛɹ޿ɹ৘ใॲཧ҆શ֬อࢧԉ࢜ʢୈ014131߸ʣ ୈ7ճɹఆྫձ CTF Writeupେձ Q16. HTTP Traffic Q18. leaf in forest Q28. Can you login? 1
2. © 2020 Kawarabayashi Hiroshi ࣗݾ঺հ ͔ΘΒ͹΍ͬͯ͜͠ΜͳͻͱͰ͢ • ۈ຿ɿ๭ITܥاۀͷάϧʔϓࢠձࣾ • ུྺɿωοτϫʔΫാग़਎ͷηΩϡ ϦςΟ԰͞Μ ݱࡏɿηΩϡϦςΟਓࡐҭ੒ • ࢿ֨޷͖ɿRISSɺCISSPɺCEHɺ ITIL ExpertͳͲ • ʮʰߴ౓ඪతܕ߈ܸʱରࡦʹ޲͚ͨ γεςϜઃܭΨΠυʯͱ͔ॻ͍ͯ·͢ 2
3. © 2020 Kawarabayashi Hiroshi • ग़ձ͍ • ̎̌̍̏೥ɹळ • ڠྗ • αΠόʔߕࢠԂ • SECಓޙ • ։࠵ • ࣾ಺ίϯςετ 3 Why? CTF
4. © 2020 Kawarabayashi Hiroshi Q16. HTTP Traffic • HTTP͸WebϖʔδΛӾཡ͢Δ࣌ʹ࢖ΘΕΔωοτϫʔΫϓϩτίϧͰ͋Δɻ ͜͜ʹɺͱ͋ΔWebϖʔδΛݟͨ࣌ͷύέοτΩϟϓνϟϑΝΠϧ͕͋Δɻ ͜ͷϑΝΠϧ͔Βɺݟ͍ͯͨϖʔδΛ෮ݩͯ͠ཉ͍͠ɻ ʼɹhttp_traffic.pcap 100pt 4
5. © 2020 Kawarabayashi Hiroshi 5
6. © 2020 Kawarabayashi Hiroshi 6
7. © 2020 Kawarabayashi Hiroshi 7
8. © 2020 Kawarabayashi Hiroshi Q18. leaf in forest • ͜ͷϑΝΠϧͷதʹ͸ϑϥά͕͋Γ·͢ɻ୳͍ͯͩ͘͠͞ɻ ϑϥά͸͢΂ͯখจࣈͰ͢ʂ ʼɹmisc100 100pt 8
9. © 2020 Kawarabayashi Hiroshi 9
10. © 2020 Kawarabayashi Hiroshi 10 ͳΜ͔͋Δɾɾɾ
11. © 2020 Kawarabayashi Hiroshi 11
12. © 2020 Kawarabayashi Hiroshi Q28. Can you login? • ݹ͔͘Βଘࡏ͢ΔωοτϫʔΫϓϩτίϧΛ࢖ͬͨ௨৴Ͱ͸ɺηΩϡϦςΟΛҙ͍ࣝͯ͠ͳ͔ͬͨ ͜ͱ΋͋Γɺ༷ʑͳ৘ใ͕҉߸Խ͞Ε͍ͯͳ͍͜ͱ͕ଟ͍ɻͦͷͨΊɺύέοτΩϟϓνϟΛ͢Δ ͜ͱͰͦͷ৘ใ͕؆୯ʹݟΒΕͯ͠·͏Մೳੑ͕͋Δɻ࣍ͷύέοτΛಡΜͰɺFLAGΛ୳ͤʂ ʼɹnetwork100.pcap 100pt 12
13. © 2020 Kawarabayashi Hiroshi 13 FTP passiveͷ΍ΓऔΓ͚ͩͬΆ͍
14. © 2020 Kawarabayashi Hiroshi 14
15. © 2020 Kawarabayashi Hiroshi Special Thanks CpawCTF 15