{"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fpizzacat83.hatenablog.com%2Fentry%2F2023%2F06%2F04%2F192918\" title=\"SECCON Beginners CTF 2023 writeup (oooauth) - \u306d\u3053\u3082\u624b\u3092\u501f\u308a\u305f\u3044\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","height":"190","blog_title":"\u306d\u3053\u3082\u624b\u3092\u501f\u308a\u305f\u3044","author_url":"https://blog.hatena.ne.jp/pizzacat83/","width":"100%","categories":[],"blog_url":"https://pizzacat83.hatenablog.com/","published":"2023-06-04 19:29:18","url":"https://pizzacat83.hatenablog.com/entry/2023/06/04/192918","title":"SECCON Beginners CTF 2023 writeup (oooauth)","image_url":null,"type":"rich","provider_url":"https://hatena.blog","version":"1.0","description":"SECCON Beginners CTF 2023 \u306b\u30c1\u30fc\u30e0 TSG \u3068\u3057\u3066\u53c2\u52a0\u3057\u307e\u3057\u305f\u3002web/hard \u554f\u984c\u306e oooauth \u3092\u3075\u3041\u307c\u3093\u3055\u3093\u3068\u5354\u529b\u3057\u3066\u89e3\u3044\u305f\u306e\u3067\u3059\u304c\u3001\u4f5c\u554f\u8005\u3055\u3093\u306e\u60f3\u5b9a\u89e3\u3068\u3061\u3087\u3063\u3068\u3060\u3051\u9055\u3063\u305f\u306e\u3067\u305d\u306e\u70b9\u306b\u3064\u3044\u3066\u66f8\u304d\u307e\u3059\u3002 \u3075\u3041\u307c\u3093\u3055\u3093\u306e writeup \u306f\u3053\u3061\u3089: yuyusuki.hatenablog.com \u554f\u984c\u306e\u6982\u8981 OAuth2 \u306e\u30b5\u30fc\u30d0\u30fc\u3068\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u4e0e\u3048\u3089\u308c\u307e\u3059\u3002admin \u3068\u3044\u3046\u30e6\u30fc\u30b6\u30fc\u306e\u6a29\u9650\u3092\u7528\u3044\u3066 GET <client>/flag \u306e\u30ec\u30b9\u30dd\u30f3\u30b9\u3092\u5f97\u308b\u3053\u3068\u304c\u76ee\u6a19\u3067\u3059\u3002 \u653b\u6483\u306e\u6982\u8981 \u653b\u6483\u306e\u5927\u307e\u304b\u306a\u6d41\u308c\u306f\u4f5c\u554f\u8005\u3055\u3093\u306e\u60f3\u5b9a\u89e3\u3068\u307b\u307c\u540c\u4e00\u3067\u3059\u3002\u3053\u3053\u3067\u306f\u7aef\u7684\u306a\u8aac\u660e\u306b\u7559\u2026","author_name":"pizzacat83","provider_name":"Hatena Blog"}