{"image_url":null,"title":"idekCTF 2024 Writeup","width":"100%","provider_name":"Hatena Blog","blog_url":"https://blog.hamayanhamayan.com/","provider_url":"https://hatena.blog","url":"https://blog.hamayanhamayan.com/entry/2024/08/20/092636","author_url":"https://blog.hatena.ne.jp/hamayanhamayan/","blog_title":"\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093","version":"1.0","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fblog.hamayanhamayan.com%2Fentry%2F2024%2F08%2F20%2F092636\" title=\"idekCTF 2024 Writeup - \u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","type":"rich","author_name":"hamayanhamayan","description":"https://ctftime.org/event/2304 web/untitled-smarty-challenge \u3069\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3067\u6301\u3063\u3066\u6765\u308b\u304b RCE\u3059\u308b\u305f\u3081\u306eSSTI\u30da\u30a4\u30ed\u30fc\u30c9\u3092\u7528\u610f\u3059\u308b \u8a66\u3057\u3066\u307f\u3088\u3046 \u30d5\u30e9\u30b0\u3092\u53d6\u308b web/untitled-smarty-challenge \u30bd\u30fc\u30b9\u30b3\u30fc\u30c9\u6709\u308a\u3002PHP\u3067\u66f8\u304b\u308c\u305f\u30b5\u30a4\u30c8\u304c\u4e0e\u3048\u3089\u308c\u308b\u3002index.php\u306f\u975e\u5e38\u306b\u7c21\u6f54\u3002 <?php require 'vendor/autoload.php'; use Smarty\\Smarty; $smarty = new Smarty(); if (isset($_GET['page']) \u2026","published":"2024-08-20 09:26:36","categories":["Security"],"height":"190"}