{"image_url":null,"type":"rich","categories":["CTF"],"description":"\u4eca\u5e74\u3082\u4f1a\u793e\u306e\u30c1\u30fc\u30e0\u3067SECCON CTF\u306b\u53c2\u52a0\u3057\u307e\u3057\u305f\u3002Milk\u3068Milk Revenge\u3092\u540c\u3058\u89e3\u304d\u65b9\u3067\u3068\u3044\u305f\u306e\u3067Witeup\u3092\u304b\u304f\u3002 \u30c1\u30e9\u30c3\u3068\u4ed6\u306e\u4eba\u306ewriteup\u3092\u898b\u305f\u3089CSP\u3092\u4f7f\u3063\u3066csrf token\u306e\u5229\u7528\u3092\u9632\u3050\u3063\u307d\u3044\u3053\u3068\u3092\u3057\u3066\u3044\u308b\u3063\u307d\u304b\u3063\u305f\u304c\u3001\u305d\u3046\u3044\u3046\u3053\u3068\u3092\u305b\u305a\u306b\u89e3\u3051\u3066\u3057\u307e\u3063\u305f\u3002 \u554f\u984c\u306e\u6982\u8981\u3068\u3057\u3066\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3002 \u30e6\u30fc\u30b6\u30fc\u767b\u9332\u3068\u767b\u9332\u3057\u305f\u30e6\u30fc\u30b6\u30fc\u3067\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u308b\u30b5\u30a4\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u308b \u3053\u306e\u30b5\u30a4\u30c8\u306f\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u3068\u81ea\u5206\u306b\u3057\u304b\u898b\u308c\u306a\u3044\u79d8\u5bc6\u306e\u30e1\u30e2\uff08note\uff09\u3092\u6295\u7a3f\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308b \u30b5\u30a4\u30c8\u306eadmin\u3057\u304b\u898b\u3089\u308c\u306a\u3044\u9818\u57df\u306bflag\u304c\u5b58\u5728\u3057\u3001\u3053\u308c\u3092\u5165\u624b\u3059\u308b\u306e\u304c\u76ee\u6a19 \u89e3\u304d\u65b9 \u30bb\u30c3\u30b7\u30e7\u30f3\u7ba1\u7406 \u554f\u984c\u306e\u30bd\u30fc\u30b9\u30b3\u30fc\u2026","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2F0xiso.hatenablog.com%2Fentry%2F2020%2F10%2F11%2F204405\" title=\"SECCON 2020 OnlineCTF - Milk &amp; Milk Revenge Writeup - 0xiso\u2019s blog\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","title":"SECCON 2020 OnlineCTF - Milk & Milk Revenge Writeup","height":"190","published":"2020-10-11 20:44:05","blog_title":"0xiso\u2019s blog","version":"1.0","provider_url":"https://hatena.blog","width":"100%","author_name":"iso0","provider_name":"Hatena Blog","blog_url":"https://0xiso.hatenablog.com/","author_url":"https://blog.hatena.ne.jp/iso0/","url":"https://0xiso.hatenablog.com/entry/2020/10/11/204405"}