{"provider_name":"Hatena Blog","url":"https://nanimokangaeteinai.hateblo.jp/entry/2025/12/31/185312","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/s/st98/20251231/20251231171005.png","categories":["ctf"],"description":"12/27 - 12/28\u3068\u3044\u3046\u65e5\u7a0b\u3067\u958b\u50ac\u3055\u308c\u305f\u3002BunkyoWesterns\u3067\u53c2\u52a0\u3057\u30664\u4f4d\u3002Misc\u306e\u8b0e\u30a2\u30fc\u30ab\u30a4\u30d6\u30d5\u30a1\u30a4\u30eb\u554f\u306b\u5538\u308a\u3064\u3064\u3082\u3001Web\u306f\u9762\u767d\u304b\u3063\u305f\u3002\u3053\u308c\u304c2025\u5e74\u6700\u5f8c\u306eCTF\u3068\u306a\u308b\u306f\u305a\u3060\u3063\u305f\u306e\u3060\u3051\u308c\u3069\u3082\u3001hxp 39C3 CTF\u306b\u3082\u6025\u907d\u51fa\u308b\u3053\u3068\u306b\u306a\u308aCTF\u7d0d\u3081\u30d1\u30fc\u30c82\u304c\u59cb\u307e\u3063\u305f\u3002 [Web] Gemviewer\u3082\u3001nobody\u3067\u3082\u8aad\u3081\u308b/\u66f8\u304d\u8fbc\u3081\u308b\u5834\u6240\u306b\u5bfe\u3059\u308bPath Traversal\u304b\u3089\u3044\u304b\u306bRCE\u306b\u6301\u3061\u8fbc\u3080\u304b\u304c\u308f\u304b\u3089\u305a\u89e3\u3051\u306a\u304b\u3063\u305f\u3002Gunicorn\u3084\u3089Flask\u3084\u3089\u95a2\u9023\u3057\u3066\u3044\u308b\u30b3\u30fc\u30c9\u3092\u6f01\u3063\u305f\u308a\u3001[ls]trace\u3067\u53c2\u7167\u3055\u308c\u3066\u3044\u308b\u30d5\u30a1\u30a4\u30eb\u3092\u5217\u6319\u3057\u305f\u308a\u3001procfs\u3092\u773a\u3081\u305f\u308a\u3068\u2026","blog_title":"st98 \u306e\u65e5\u8a18\u5e33 - \u30b3\u30d4\u30fc","type":"rich","provider_url":"https://hatena.blog","height":"190","width":"100%","title":"ASIS CTF Finals 2025 writeup","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fnanimokangaeteinai.hateblo.jp%2Fentry%2F2025%2F12%2F31%2F185312\" title=\"ASIS CTF Finals 2025 writeup - st98 \u306e\u65e5\u8a18\u5e33 - \u30b3\u30d4\u30fc\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","author_name":"st98","published":"2025-12-31 18:53:12","author_url":"https://blog.hatena.ne.jp/st98/","version":"1.0","blog_url":"https://nanimokangaeteinai.hateblo.jp/"}